Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: Hu1svlWtcEyhhmDTQ70enCavol+SPXCApo7UirLov/E=
Subject key identifier: C8:3C:8E:3E:D5:F2:B8:A7:6C:C3:99:C5:70:BB:27:68:5F:D4:03:62
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019A70A54BF7ADDA803F1B130511533A5C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: j1yW9s8dQGPaWJjE0z9GWwGhYprv2Lv6oasr662p+1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4b:f7:ad:da:80:3f:1b:13:05:11:53:3a:5c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=c83c8e3ed5f2b8a76cc399c570bb27685fd40362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:8f:22:24:cb:76:19:0b:5f:a6:16:44:f9:
5c:23:48:68:64:2d:75:f9:46:08:10:03:4b:8f:a6:
63:00:4b:41:80:bb:d0:9a:0e:53:cd:b2:99:d6:fb:
b6:e2:1c:9a:d0:54:f8:0a:c0:4d:af:b0:54:da:c1:
ea:f9:9b:2f:83:f2:ae:b9:3a:3d:41:2f:b3:98:20:
25:91:47:12:e6:b5:c7:f8:6c:de:79:4a:04:db:98:
e6:9f:77:b7:f6:d7:f6:f7:a6:8f:12:98:22:3d:e0:
dc:54:db:53:f7:ca:45:91:ea:a4:e1:cb:5a:f4:58:
ac:66:f0:9e:60:eb:92:04:9f:6f:68:1b:5e:db:ae:
7c:82:27:26:2f:96:2b:92:3d:de:ab:e5:c1:03:7a:
78:48:d8:5a:c8:76:14:da:45:ba:37:03:8a:97:af:
db:31:ac:60:4b:4d:a8:99:40:98:1a:76:8e:cd:7a:
9a:fa:4d:4c:41:4d:43:0f:d0:e4:bb:87:37:7d:61:
4f:1a:d2:0e:42:a3:8b:04:c7:6a:10:0c:b9:eb:9a:
68:e2:7e:35:14:6f:c2:40:68:d0:0e:81:f0:2d:a2:
40:f3:51:d6:39:19:f9:1c:03:58:a2:50:9f:f8:36:
61:8f:ad:1e:94:fd:96:ea:a2:91:90:71:29:73:84:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:8E:3E:D5:F2:B8:A7:6C:C3:99:C5:70:BB:27:68:5F:D4:03:62
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:93:72:11:dd:17:bf:12:04:03:1d:2c:7b:61:fb:e0:0f:d7:
8d:55:17:8d:cd:bf:df:c1:08:75:02:e0:81:63:bb:94:42:51:
51:06:40:57:84:b5:8a:86:7f:ac:24:de:94:71:f9:22:da:1f:
19:0e:7f:88:69:62:fd:15:9c:09:4a:01:94:bb:68:26:ed:5d:
33:61:79:13:7b:4c:f5:28:c1:bf:5c:27:44:51:fb:a0:58:98:
e0:e1:de:aa:8b:fa:f4:21:65:b0:92:cc:b3:a9:74:4d:aa:d9:
ad:71:33:ba:4c:0e:0f:17:96:70:9c:c4:23:22:b6:e5:ab:82:
46:e7:d6:4e:38:a9:7a:26:5e:ca:a9:2d:a6:05:68:50:4a:dc:
f7:cd:0c:94:71:3b:12:e3:aa:dc:cc:42:12:a7:b4:75:ed:93:
06:ea:12:d9:c0:4c:27:a3:dd:71:3e:b3:e6:79:37:01:ad:19:
7e:fd:f1:8d:31:86:b5:2d:60:77:31:e0:18:8a:51:29:15:9c:
09:9d:d4:97:83:f1:f6:a8:08:5a:6f:a6:e4:4a:be:5f:66:9b:
66:ac:7c:23:6a:75:21:8c:56:a8:2d:ee:79:2a:c6:9b:bf:e9:
61:ca:96:f8:4a:b5:6f:e7:bc:53:8d:d3:c6:b1:39:69:6b:6c:
b9:01:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:26 2025 by rpki-client