Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: IL5zPIs3MS2iEUJ3nwhTVIoyp+sSdoMFR435KR3S+gQ=
Subject key identifier: 9B:FE:39:29:44:5A:2F:61:EC:59:58:AD:7D:98:5F:6B:59:DF:AB:71
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 019A70DC5266D9A1635F1BC85B3E78788FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 0404
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: 2H+El/JxiEx/0Qyu1yeJ9hl/7Y67Tm3uUlRAed1INas=)
2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:52:66:d9:a1:63:5f:1b:c8:5b:3e:78:78:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=9bfe3929445a2f61ec5958ad7d985f6b59dfab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:f5:d7:7a:8c:39:f6:dd:66:b5:ff:73:50:
16:33:83:eb:14:44:d4:e3:db:f3:92:31:e3:e0:14:
fd:fb:18:6c:88:b8:ba:e5:54:42:d7:29:d7:f3:00:
f4:58:5c:61:12:42:36:dc:38:c4:fb:b4:33:d3:f7:
b4:73:e5:56:e7:c3:3b:f1:ef:2f:fc:e4:b1:cc:61:
eb:9c:e7:ac:a6:8c:bd:24:94:d0:96:15:6e:c3:41:
3a:c8:76:34:9d:af:83:c4:c3:92:85:7f:d2:f5:12:
2b:43:20:e5:7a:cc:41:9c:48:43:92:d0:36:14:af:
a0:4e:a4:0c:7f:8d:45:f3:79:e6:e6:f5:e9:cf:ca:
97:ff:d7:da:94:2d:f6:55:07:43:f7:03:93:ef:27:
fa:7e:96:0d:34:ca:5e:af:f0:35:05:93:be:8d:87:
ca:dd:9b:5e:f3:a0:ae:26:d4:c7:c5:a3:8b:f3:c4:
53:a7:02:c2:49:e7:1a:09:d4:8e:79:e2:f1:58:8a:
25:fa:ce:17:68:a1:cc:a9:6d:3d:fb:08:18:46:49:
32:f4:cf:54:78:54:f8:86:14:61:a9:a0:9f:f0:f9:
4a:c4:08:98:94:48:30:c6:6a:6d:39:73:97:d6:b5:
74:8a:04:1c:65:a3:b1:e1:e8:c7:8d:b9:f7:7a:23:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:39:29:44:5A:2F:61:EC:59:58:AD:7D:98:5F:6B:59:DF:AB:71
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:54:a9:a6:65:af:70:96:dc:01:d3:c1:14:39:12:42:e8:44:
88:c2:0d:64:b6:de:bc:4c:9e:50:60:15:04:04:ff:1f:af:4d:
ea:47:34:f4:0b:ed:f1:8d:9d:7b:10:aa:fc:20:ca:56:8b:73:
26:0a:8d:b0:b5:73:f0:04:c2:4b:9d:2f:f3:15:4f:b6:3d:aa:
8e:a1:eb:86:44:9c:46:6c:8c:f0:c8:21:77:cc:d2:41:3d:fa:
9b:4d:85:4e:24:3d:da:4d:65:1c:34:a3:8c:7f:48:68:08:ad:
35:52:bb:3c:87:0e:1a:b6:ad:af:03:e0:29:79:4b:4f:74:38:
63:70:3d:60:51:f7:df:4e:b4:d8:1e:93:59:97:3c:b4:8c:e7:
31:57:4a:27:54:0c:8e:63:80:98:93:fc:ca:79:31:51:2a:9f:
fb:97:9d:88:66:c7:1e:93:68:19:69:1d:ff:b1:42:53:d0:c7:
a9:53:15:ac:00:63:eb:e4:72:1f:e9:e9:18:b8:4c:68:12:a0:
79:3d:45:60:ab:64:e2:cf:01:1f:62:fd:78:76:ff:61:11:c7:
97:b1:1a:98:33:e0:d9:63:71:32:6a:38:6c:5c:93:25:98:ee:
e5:c1:37:24:24:46:81:24:2c:04:c3:2e:7a:1f:30:5c:89:59:
d9:0a:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client