Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: gR2q+srsO5ZabnFS0MqVxHKMuN2dS+j6BFCfpdQgrzI=
Subject key identifier: DF:59:B8:B7:5E:93:72:2E:9F:67:41:2F:02:B5:46:6A:1D:88:10:21
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 019A232EAA5A872A46F01FCADDD3A27E03D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 01:00:52 +0000
Manifest this update: Mon 27 Oct 2025 01:00:52 +0000
Manifest next update: Tue 28 Oct 2025 01:00:52 +0000
Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: hHN2XSyMJZdeHSQCr1z+AsPzsn/Js18yNiKV5MuzaxU=)
2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:aa:5a:87:2a:46:f0:1f:ca:dd:d3:a2:7e:03:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Oct 27 01:00:52 2025 GMT
Not After : Oct 28 01:00:52 2025 GMT
Subject: CN=df59b8b75e93722e9f67412f02b5466a1d881021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:24:81:48:f4:20:f0:a4:fb:e7:d7:af:28:
4e:3e:c8:70:6c:b4:9e:18:99:d9:50:31:4f:cf:f1:
f0:a3:4e:26:cc:30:af:65:ef:8b:4f:2b:a9:fd:48:
62:0f:8e:ae:cc:f6:0c:ac:63:6a:a7:95:9f:fa:26:
e9:ee:56:c9:b3:a6:ca:6f:2c:65:00:04:f3:46:1f:
95:9a:b3:4f:1f:70:b2:58:63:6f:20:2c:67:ba:51:
26:40:f8:46:a1:b8:3f:b2:3b:02:73:9b:9a:16:7f:
90:0e:54:9a:b7:0a:70:b2:70:0f:0d:05:f5:8a:79:
15:c7:17:5c:f7:0b:18:ef:89:7f:2f:d7:b8:a3:21:
3c:fb:8e:56:50:64:c3:53:37:1d:b9:92:52:09:5d:
06:79:6e:74:0f:6b:8c:48:2d:45:ab:0c:6c:fe:af:
b6:33:01:69:ef:1f:a7:d7:5d:ff:eb:87:19:87:00:
d8:d9:5c:b3:68:6b:65:cf:c0:ed:89:03:f9:68:e1:
16:f3:5e:aa:74:68:2c:f2:64:25:c3:7f:4f:ca:1d:
6a:f2:32:86:f2:df:b6:04:46:8b:ed:49:d0:7e:0f:
24:7a:3f:fc:af:43:e4:20:0b:30:dd:77:bb:71:4a:
1f:68:81:75:97:ea:88:fa:27:de:8e:e3:1e:5b:67:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:B8:B7:5E:93:72:2E:9F:67:41:2F:02:B5:46:6A:1D:88:10:21
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:31:34:49:4a:04:02:af:fb:cb:72:40:64:b8:33:26:50:51:
00:62:a6:16:d9:89:15:17:01:86:52:11:0d:52:66:9c:ec:ea:
b5:48:35:f1:3b:3f:a8:4a:90:0d:a3:f3:95:15:14:96:b8:07:
be:8a:3a:b5:3c:c9:af:c4:4c:aa:ac:01:f8:70:a9:90:f1:bd:
cd:b7:f5:e0:9e:4e:35:69:84:08:80:f1:a5:74:3e:c1:04:cc:
39:cc:a3:ad:7d:5d:18:df:13:11:6c:e6:5f:11:bb:8a:e4:bd:
c9:87:2a:98:68:93:4c:32:38:3e:04:c3:c6:99:6f:43:f2:d7:
3a:7a:22:c6:f9:f5:4c:e7:c3:b8:19:23:24:4a:0f:f6:b9:1f:
3f:5a:a0:dd:bc:64:f7:36:86:f1:54:87:b3:52:1d:e7:f7:2b:
0d:ab:5b:d8:82:2e:89:23:a2:85:29:d3:e8:ad:82:d1:2c:de:
99:42:d9:8e:b1:25:01:ef:16:8a:4b:5e:07:65:92:7d:67:34:
6e:f9:2a:f0:7e:a0:1b:ba:ef:8f:11:f1:86:29:4d:46:f6:ed:
e9:99:ee:42:9d:63:6d:18:40:0e:a8:aa:86:bf:67:ab:8f:39:
7c:cd:d7:b3:63:24:69:e1:34:be:af:01:32:28:42:d1:d2:11:
17:9f:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:59:54 2025 by rpki-client