Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier: 1W+h6dC1oWPxnqaWHQZTCmvKN5MOJB1IcMHAWIMKagc=
Subject key identifier: 20:8A:BA:B1:D6:78:E4:E7:EA:F9:D5:4B:86:F4:E3:7C:6C:40:C9:5E
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 019A7112CE4CE22050EEF4A95829B5EC00E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number: 09ED
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: 5a0P3LNWGtllqL7YlUjRKGGa4xMMnfc0c7FLg3Z9Eug=)
2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ce:4c:e2:20:50:ee:f4:a9:58:29:b5:ec:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=208abab1d678e4e7eaf9d54b86f4e37c6c40c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:07:e5:76:f9:f0:1b:9b:b4:a5:d3:e0:13:
01:9b:22:9a:79:09:51:af:47:90:8e:4d:ba:95:1c:
1e:b4:f4:33:04:99:72:18:d4:2b:08:1b:3a:7e:c7:
61:ca:20:2c:82:05:69:b2:0e:63:dd:41:2e:58:8f:
60:34:0c:82:f2:cc:ea:28:1e:55:76:eb:88:50:98:
e3:ec:ab:1d:2f:7d:18:1b:10:cf:aa:73:d7:bd:bb:
ae:ea:06:12:a2:d5:cd:7d:4c:53:30:96:b1:ac:d6:
c1:49:a5:1a:69:c3:15:00:34:3a:04:6c:da:b7:6f:
41:43:b7:7b:61:06:89:c7:ad:80:23:63:a7:8a:5d:
e8:af:0a:a0:21:1a:0e:cf:29:3b:42:82:46:16:21:
20:5d:91:f8:a6:ed:f3:b6:61:b9:9a:c8:79:0f:af:
90:f1:3a:cd:ab:27:5c:7b:a5:d1:f9:6d:4f:6c:6e:
3c:7d:31:59:30:7f:ce:cb:e5:7d:16:dc:b0:b9:6b:
3a:2c:c5:cd:0d:2c:d1:50:d2:c6:84:64:cf:af:e8:
1a:e4:e6:16:75:68:2d:ab:3d:b4:32:3b:ee:8f:36:
44:39:06:de:2a:ec:43:48:64:b3:14:e0:7e:68:ce:
ba:51:7d:40:89:ef:63:9f:ea:f7:e2:32:58:b3:e3:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8A:BA:B1:D6:78:E4:E7:EA:F9:D5:4B:86:F4:E3:7C:6C:40:C9:5E
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f5:9a:4c:3a:91:da:ad:30:b5:1f:bb:98:61:1d:b8:68:1a:
d9:8b:05:13:6f:eb:af:68:e9:21:13:5b:bf:8a:9d:40:11:32:
d9:b6:aa:0b:bc:19:8f:66:f9:49:62:e2:f2:5c:6c:48:9c:c5:
0c:3f:e6:69:f6:3c:52:37:5f:35:45:cc:a2:eb:72:f6:4f:cc:
f1:7a:3e:1b:9a:df:ff:c5:24:8a:3b:9e:e1:fe:4a:5e:22:3a:
85:27:e1:46:4c:43:6e:3d:ec:6e:2d:7e:c3:26:f2:44:56:65:
f7:47:6e:85:c4:da:ef:31:ea:0f:46:0a:f1:01:97:5c:7a:92:
46:e2:5c:8f:bb:e4:3d:b2:37:70:af:5b:b2:3a:65:7f:2a:4f:
cc:52:86:20:32:75:a3:74:e9:e0:d0:5d:6f:e5:96:35:4d:3d:
47:e6:f7:42:e5:da:5f:a9:30:18:1f:2b:6f:9e:05:76:e1:40:
13:e9:e4:a5:63:6e:14:d4:58:e8:e3:e2:c4:ce:31:45:92:db:
df:69:b9:29:2e:6d:28:d9:58:05:5a:38:09:a7:d8:32:07:0b:
24:95:07:09:bc:74:ef:7a:8f:4c:97:3a:97:0f:d6:2c:58:d0:
c9:2f:60:2a:9c:71:06:59:e0:30:77:44:2e:a4:7b:f7:22:3c:
61:3c:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:57 2025 by rpki-client