Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: 029KaFmD2sjsOLgko0YJ1rCJhEDlWQklZVz/+1j4yV8=
Subject key identifier: 46:D2:12:C5:DA:53:2A:DE:66:8F:41:DB:54:D2:A7:C0:80:23:63:D4
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019A72262D46449257647D001D3E4B711EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 1264
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: hfoJVeSeazC7Pk8HMlGa0+K9ThIbFswQhA0AW9LyqaU=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:46:44:92:57:64:7d:00:1d:3e:4b:71:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=46d212c5da532ade668f41db54d2a7c0802363d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:2b:13:96:2c:63:63:e3:74:14:eb:f5:c3:
c5:df:b5:2f:56:80:01:78:8a:02:87:a5:72:8b:b7:
5d:b3:be:68:37:55:70:b6:61:3f:33:6a:ea:71:cc:
65:bc:13:25:02:52:2d:f3:61:2a:64:b4:62:e5:d3:
48:5e:04:c6:25:ae:fe:44:9e:88:28:b0:6c:33:3c:
05:8c:ed:4b:60:c1:b8:75:bd:75:7d:8b:fa:d1:86:
d7:62:b9:b4:62:4f:db:87:69:3f:db:76:55:87:99:
72:43:98:c9:d9:f8:f0:b0:f0:62:47:80:ef:81:6f:
e7:4d:87:96:a4:04:f9:79:d0:a7:8c:9e:a0:c7:2d:
5f:8a:1c:9a:c6:49:c5:ce:d4:f9:a1:93:a3:47:94:
61:e0:fb:30:41:27:bb:7d:47:cc:c1:d8:84:fb:d2:
0e:0d:94:62:b0:01:48:c1:4c:65:e5:cd:2b:78:7a:
36:7f:67:cf:be:6f:78:9b:3e:91:5a:b9:60:47:14:
ea:18:d8:73:7d:8c:e4:36:f6:ba:91:aa:db:82:00:
7d:b3:a3:bc:db:5e:58:60:3a:cd:db:f5:ec:e1:d0:
99:e1:d4:30:ff:3b:31:6c:f4:66:3d:11:cf:c3:28:
1b:b4:24:ce:50:8f:0c:3a:ef:b3:08:7a:73:4a:be:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:12:C5:DA:53:2A:DE:66:8F:41:DB:54:D2:A7:C0:80:23:63:D4
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a1:51:02:f7:ba:c9:29:15:65:8c:82:04:42:04:3f:25:97:
5e:45:9e:64:28:40:2d:a0:a3:ed:81:38:27:85:5c:9b:54:49:
b8:21:30:ee:f8:9a:1c:a3:65:45:d4:38:b7:0d:c0:07:38:2b:
38:3a:8c:14:b3:d7:57:57:03:d8:0f:97:bf:d9:d0:61:d2:4c:
c9:36:a0:2f:60:0b:6d:50:d3:9c:ac:42:62:0d:2c:6b:0e:c0:
ab:ba:11:d2:89:9f:9a:69:a5:b5:8c:dd:25:10:90:34:33:3b:
dd:af:3d:78:29:e2:49:1d:fa:9e:49:fd:fe:36:50:20:7c:f3:
c3:c4:f1:13:5d:06:a4:3e:d7:19:5d:1e:7d:d0:90:a7:cb:52:
c2:5d:3b:85:08:d9:bd:77:a8:ff:41:21:82:34:13:46:f9:bf:
99:2b:93:1d:17:5a:dd:83:5c:ce:b2:2c:42:10:82:4a:16:39:
e9:66:89:c6:44:4b:e9:16:89:db:b0:03:65:32:91:af:11:16:
67:50:fd:21:49:83:8b:ef:27:20:c6:8a:29:ba:37:73:6e:f2:
05:bf:19:29:4f:b2:2b:b7:9b:97:72:a0:c1:f5:8d:f0:9d:da:
41:7f:4a:01:82:db:bd:05:71:23:da:eb:46:db:2a:5e:f7:8c:
ea:b2:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:51 2025 by rpki-client