Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File: FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier: xemEN6acamFU4EqUUZAy2WX+oODIPsBsruRO1DKRsjY=
Subject key identifier: A8:25:89:91:56:39:F8:1E:C6:D0:92:EB:C9:89:4D:3D:9A:AC:3E:15
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019A73A6C927939FD72295BAD632A206C6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number: 119A
Signing time: Tue 11 Nov 2025 16:01:41 +0000
Manifest this update: Tue 11 Nov 2025 16:01:41 +0000
Manifest next update: Wed 12 Nov 2025 16:01:41 +0000
Files and hashes: 1: 4kg4y74yKFBoKL19EAnoggmnyVU.roa (hash: KOLvfzWJXbHmd9fxVRUIYFEHdRGKTleOpLyOLjIZHVY=)
2: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: zX8y28zCNLUyDGChnOa0Eap26kpgs+4dVgqVKjWvXsM=)
3: Lc76ATmh3N2WmZPDYJ9rzhql95s.roa (hash: u40vTHuUL4j8mKfluquxQoMV2MtHuQDBqovqP0w+ck4=)
4: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
5: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
6: vkmUdjCWN1ZeVuWp7Z6DgVm4SGk.roa (hash: 1vheYcmcnb4TdJ7xu17GBmTQ7bM9CvRsfJ3QRM8fYsc=)
7: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:c9:27:93:9f:d7:22:95:ba:d6:32:a2:06:c6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Nov 11 16:01:41 2025 GMT
Not After : Nov 12 16:01:41 2025 GMT
Subject: CN=a82589915639f81ec6d092ebc9894d3d9aac3e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:96:cf:bf:c2:2d:2d:73:c3:a7:98:28:4e:
82:78:2c:80:e3:a2:8d:dd:ec:0e:2f:e3:b0:5e:da:
db:c0:94:8f:49:b6:ae:76:a7:43:aa:3d:4c:f4:bc:
05:01:55:3d:38:89:a2:5e:92:cb:02:32:9a:1c:d9:
db:08:1f:2e:84:3a:0b:af:18:93:99:34:35:0c:ab:
d6:79:89:81:34:8e:36:34:84:58:91:c7:b9:4b:fe:
03:71:cd:17:09:c7:3b:9a:12:3b:76:53:8b:ed:3b:
59:64:bd:88:1b:da:17:6f:2e:a7:57:dc:53:c3:cd:
eb:71:a6:ba:8b:f9:3a:00:81:0a:89:f1:0e:72:53:
ca:ff:fa:f9:e4:f8:a2:c1:ee:b6:13:1d:bf:4e:ad:
6c:b4:09:28:1f:f3:16:38:86:d6:08:28:69:5d:31:
ab:fa:d7:b3:9c:68:81:bd:db:eb:95:85:30:15:f9:
b3:1f:a3:f2:1e:8f:56:bf:3b:e4:41:d9:0a:2f:70:
f5:87:e4:64:18:00:ba:03:8b:9d:a2:40:b6:6e:bb:
ca:34:1c:22:bf:6e:1b:3f:cc:68:d9:2b:88:9d:41:
c2:b4:c4:01:09:18:f9:5e:ea:79:52:5c:0c:f1:d2:
c2:57:52:2a:5a:64:2d:49:9c:24:32:a6:03:fa:3c:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:89:91:56:39:F8:1E:C6:D0:92:EB:C9:89:4D:3D:9A:AC:3E:15
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:11:cf:9f:d7:28:47:aa:2d:9a:c7:98:5d:70:88:6e:59:
ef:9e:dd:44:2e:70:5a:53:1f:db:11:bf:5d:0e:80:aa:41:a4:
54:c5:c6:b2:d7:80:57:3e:5f:3e:30:b1:bd:bc:4b:45:72:1c:
09:11:a9:b4:1e:0c:3a:89:7b:ee:56:47:cd:b1:70:b9:f4:ca:
6b:1d:ce:69:3a:8e:4e:e8:b3:a8:de:66:3e:2f:05:53:5b:c5:
3d:9b:aa:d1:6e:33:23:bf:16:13:b5:31:27:18:3a:ea:31:cb:
39:52:33:68:ca:e0:a3:87:12:6b:9b:ec:3a:28:a6:7c:26:7c:
23:3d:06:21:12:dc:f2:7f:db:82:21:cb:17:26:46:38:d9:3c:
39:b4:c1:f8:12:10:6a:37:15:90:d0:56:e3:8d:67:f4:b1:ca:
9f:4b:7d:38:7f:d4:ed:58:b9:4d:9e:39:99:9b:0c:4b:66:d5:
49:62:a1:d0:38:0d:cc:64:5d:d4:34:36:92:18:5d:a3:cb:db:
9d:ad:c8:ea:a1:34:ef:d8:03:21:e9:59:d2:45:fe:12:81:93:
ed:e3:0e:e4:b9:bf:4d:96:a1:83:57:dd:cc:d3:26:17:8b:6c:
52:a5:ad:81:54:0f:a2:9e:a0:d8:62:b6:a1:91:3e:09:7f:6e:
ce:3f:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:48 2025 by rpki-client