Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier: ypqj8Py4QDfV1ZtsT5d4TYZ4EfENSEErt+WASG4bJj4=
Subject key identifier: 78:01:07:31:40:7D:26:A1:E4:9E:97:75:81:19:FD:24:2F:C2:7C:AE
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 019A39B5D4162C624F6C6FCE1C631F35E386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number: 1692
Signing time: Fri 31 Oct 2025 10:00:08 +0000
Manifest this update: Fri 31 Oct 2025 10:00:08 +0000
Manifest next update: Sat 01 Nov 2025 10:00:08 +0000
Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: cXJEk60diOgwcoC5Fp1+GcKQFyNsnG+P0VHg22niTu8=)
2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:b5:d4:16:2c:62:4f:6c:6f:ce:1c:63:1f:35:e3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Oct 31 10:00:08 2025 GMT
Not After : Nov 1 10:00:08 2025 GMT
Subject: CN=78010731407d26a1e49e97758119fd242fc27cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:1d:e9:23:37:a6:ee:e0:cf:3d:fa:a5:55:
75:4b:ed:e9:eb:8f:ba:50:ba:a2:ee:94:4f:ef:b5:
07:a6:6f:2f:51:f4:bc:e1:60:17:a8:4f:93:35:a3:
c4:a8:1f:23:a2:be:7f:08:21:24:d2:40:58:f4:82:
dd:e7:f2:2a:b7:03:ce:6b:77:cb:4e:98:e7:9d:12:
37:40:53:7f:82:ce:67:c7:c7:84:10:12:11:0e:2b:
ae:8e:81:81:80:fa:a3:d8:a4:db:06:fb:66:3c:23:
aa:a2:33:ea:69:f6:6e:fc:8c:54:ae:06:52:a4:1c:
e2:b1:cc:77:d0:aa:5b:ec:bf:d1:dd:cb:32:6d:2d:
3e:e8:cc:30:71:26:81:b8:a9:d7:79:90:3a:1f:7b:
7c:91:00:54:7b:63:18:cb:57:5f:6c:e6:f8:bc:67:
75:0d:68:bb:f7:f4:79:55:cc:05:64:ac:98:42:27:
4b:1b:4e:dd:d4:56:5a:50:76:08:b2:d9:cb:31:ba:
22:d1:ab:45:bf:ed:9f:25:4d:ed:d4:01:b3:e8:b1:
31:e9:7a:50:5c:ee:4f:6e:6d:9f:9a:8c:0d:30:4d:
29:4d:17:69:bd:f0:23:63:d4:8b:17:3f:52:52:cf:
ff:66:6d:f4:bd:c5:1f:e5:49:74:3b:22:69:a6:db:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:07:31:40:7D:26:A1:E4:9E:97:75:81:19:FD:24:2F:C2:7C:AE
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:50:8b:be:1a:d4:68:65:6e:42:00:df:95:d7:da:17:bb:31:
d1:b7:a9:22:bb:33:82:f5:c7:46:4d:2d:2d:31:92:4d:f7:16:
2a:48:5c:86:2d:76:b6:15:5a:91:48:3d:59:ec:d8:0d:45:8e:
63:4b:ab:07:7c:16:46:26:d8:24:1c:eb:51:41:94:1d:f4:92:
96:d2:73:fd:6e:1c:70:c0:c3:d0:78:72:fa:84:76:39:db:bf:
29:06:76:5d:05:08:54:16:c8:b1:8e:b0:33:af:20:02:6e:a7:
74:61:3b:b5:ee:31:4f:ca:cd:9d:a5:cc:53:d7:d2:9d:56:29:
7e:70:0b:dc:f8:cb:27:56:d7:2c:f7:4b:96:95:90:9d:db:cb:
d5:43:6d:39:cd:a8:88:4f:98:a8:c1:9c:0b:81:fe:48:2c:d7:
85:36:04:29:18:21:77:b7:94:d3:de:9d:9a:93:c2:79:f1:6c:
ef:c4:38:54:88:14:4a:39:2d:7e:80:94:d7:23:ff:82:8c:23:
63:28:f9:e3:18:24:5c:ff:09:6b:f2:b3:73:a4:83:f3:91:b8:
36:9d:be:cc:4e:18:8a:94:24:59:2d:d6:06:f7:a2:3e:8d:92:
27:a9:7c:75:9b:4c:e8:16:d8:77:8d:68:69:36:2a:a7:2d:a6:
a4:ee:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:22:02 2025 by rpki-client