Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: maFjNCkk4no6NUAtzF1mQU24I/D4eG5qq6vnQY+B7xc=
Subject key identifier: 82:D1:F0:C3:6C:AB:6E:FC:BA:71:14:8A:DA:73:61:AF:10:2F:A6:1A
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019A706E2F79784BA4FB6A886765D9A92A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 09C2
Signing time: Tue 11 Nov 2025 01:01:00 +0000
Manifest this update: Tue 11 Nov 2025 01:01:00 +0000
Manifest next update: Wed 12 Nov 2025 01:01:00 +0000
Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: MTDGWJI4KRZTU0ClbQjJrJ0ZASpfWoSppASSjkkEZ8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2f:79:78:4b:a4:fb:6a:88:67:65:d9:a9:2a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Nov 11 01:01:00 2025 GMT
Not After : Nov 12 01:01:00 2025 GMT
Subject: CN=82d1f0c36cab6efcba71148ada7361af102fa61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:d3:7c:04:4c:fa:9f:7e:78:21:79:90:da:
48:24:d1:cb:a1:3d:05:ec:bd:fe:23:df:c0:82:eb:
20:25:3b:2c:11:88:78:58:24:57:72:41:3c:b3:29:
5e:1c:02:17:22:e2:46:ca:0c:24:ab:5d:2b:69:40:
e1:67:fb:89:63:1c:16:6c:89:65:88:41:f9:87:9f:
b3:35:e0:05:45:71:a6:73:87:b5:bc:01:2b:db:bc:
27:d8:9b:3e:a9:b4:d3:63:ab:7b:4e:1d:2a:10:ed:
2c:8d:03:c5:63:02:2f:8a:37:6e:f5:1b:32:32:2a:
a8:85:6d:09:3f:d1:9a:24:f5:e6:20:86:30:6d:7b:
97:8e:bd:67:9d:08:e9:77:ef:a3:21:8d:48:86:58:
98:ad:74:b7:45:04:3a:a6:d1:70:20:70:c4:ce:17:
30:c9:70:87:ed:bc:51:72:8b:f0:4d:ca:43:7b:7f:
8c:7d:a1:da:70:c4:fd:cc:c3:03:e0:45:f0:6d:e8:
31:fb:09:87:e6:9d:19:7d:68:e2:cd:07:d7:5d:4f:
96:d1:fd:ff:eb:b7:b9:31:d4:ce:21:51:ca:76:09:
67:10:9f:4e:d7:7c:4c:7e:bf:79:99:f2:3f:fd:2c:
1f:7e:a3:23:08:26:69:90:ed:f2:c3:fa:97:41:7b:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:F0:C3:6C:AB:6E:FC:BA:71:14:8A:DA:73:61:AF:10:2F:A6:1A
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:be:3e:34:9d:dc:d6:6d:91:e5:fa:03:2f:b3:23:90:d0:
da:5f:d0:54:2d:9f:8c:fc:e2:7d:12:67:50:f8:21:b3:00:50:
e9:49:82:ee:8f:02:de:1e:65:50:59:2a:a0:d6:1b:c6:b8:39:
57:68:d7:97:67:68:e3:7f:96:5a:e7:1f:46:d2:ce:a5:06:fa:
d6:10:98:8f:d9:01:c2:bc:e3:6d:7f:09:53:2d:1a:40:11:63:
ac:a2:31:0b:16:da:9f:98:42:6e:6e:99:fb:7e:c0:54:5a:1b:
b0:b0:de:6d:32:13:17:3f:01:4d:8a:d9:8e:3c:08:39:39:8b:
39:0a:55:8f:d5:c8:d8:62:db:5b:d3:07:b2:3d:be:ae:b9:5a:
5c:cb:9a:3e:62:ed:d8:df:d2:78:af:0f:59:de:37:7b:3f:76:
92:b9:c4:50:65:68:2d:e9:f4:9d:38:30:72:48:5b:2d:d6:ef:
99:d2:5f:9a:41:4d:97:75:d9:9b:a1:49:8b:16:29:07:55:1d:
25:68:8d:0a:e1:de:81:57:cb:b2:90:e4:bb:59:cf:c6:6e:b2:
ff:ea:0d:5f:51:2e:cb:b7:1e:47:df:73:cc:2b:ec:35:37:24:
0c:51:08:1a:49:d9:28:0e:a9:ef:0c:31:9c:10:fa:ab:1f:6f:
13:60:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:12 2025 by rpki-client