Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: rOJo70XsE9/4Z4oV0dH1ywcaYYxNlKU+g5gfMm/i+Mo=
Subject key identifier: C8:EC:DE:33:03:E9:74:CB:23:61:65:22:94:D2:96:69:88:D4:11:32
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 019A71B8507F26F55240465AD9AF647B93C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: mlF4gpFLape40pAUhH+ORVzcvWd23WOsD8RcpeGaCW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:50:7f:26:f5:52:40:46:5a:d9:af:64:7b:93:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=c8ecde3303e974cb2361652294d2966988d41132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:7b:85:a3:d0:31:76:95:a5:94:74:a5:d8:
8b:8c:d6:2e:db:3c:69:3b:c8:b4:2a:7b:bd:5c:40:
03:4f:de:04:02:77:0a:9f:50:83:24:1b:3a:a1:de:
a5:fd:41:2e:83:b1:9c:14:d1:d8:18:52:6c:2b:44:
c2:36:67:7e:cb:66:91:bf:6b:a4:be:97:13:3a:b9:
9c:83:1a:ef:25:a9:6b:17:00:ea:58:88:e7:f2:f0:
57:ca:de:c8:fd:c0:d3:78:55:35:79:e1:f3:0c:7c:
d2:e4:ad:1b:bb:9b:ab:05:55:62:33:b4:7a:d8:3b:
82:53:79:19:27:b2:b8:b0:b7:69:f8:66:87:fa:bb:
19:e9:6b:26:0a:be:f5:15:70:cc:18:ef:ac:0d:7e:
ed:d2:29:1e:80:a8:b8:68:f1:f8:db:d1:ca:93:a1:
25:2a:c8:fc:5f:bc:48:d9:df:6c:a6:6e:94:62:92:
65:63:f2:8b:56:10:41:4b:5f:3f:fa:10:89:e8:4c:
83:84:0f:30:c5:5f:2a:b9:b5:2d:17:4d:a7:e9:eb:
bd:c6:17:aa:e9:08:5a:3b:7a:0b:14:b9:1d:fb:0a:
1e:ef:25:17:9c:53:9b:95:a2:36:a8:a3:13:8e:37:
63:fd:0f:b2:74:7c:74:52:ea:c5:45:77:9b:8e:ca:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:DE:33:03:E9:74:CB:23:61:65:22:94:D2:96:69:88:D4:11:32
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:de:92:4f:e5:fd:a5:82:50:5d:b1:da:bc:30:9e:84:4a:ad:
67:a4:0c:24:56:71:f1:73:e0:95:17:a3:7c:8b:64:4e:a6:93:
7e:71:63:2b:74:6c:86:ea:3f:83:32:f5:43:4d:50:1f:87:9e:
c3:4f:87:c4:90:56:ec:74:19:7c:f0:e9:a6:99:eb:2a:49:f2:
4a:26:59:40:e3:a3:60:47:f6:a4:f7:53:71:9c:e0:f4:cd:7a:
6f:df:75:5f:d0:10:26:17:2e:f1:92:91:0f:73:ba:91:01:9a:
cc:35:5e:35:a8:d1:ba:91:7d:74:8d:4b:4f:c8:67:13:82:40:
b2:bf:d9:49:7a:c2:d7:c8:26:c9:ed:8a:2f:6c:5e:9c:b8:84:
2b:af:7e:14:0d:f2:89:01:a6:67:02:ba:fa:8b:50:37:9c:51:
cb:85:0a:6a:22:d6:75:7d:47:33:04:69:ca:52:82:e8:98:17:
16:27:6c:0a:07:13:43:12:58:c9:87:b1:b3:e6:06:86:a8:87:
62:c1:6b:c3:50:f4:2b:a4:1f:94:ec:c1:ff:93:a3:f1:09:2b:
8e:64:32:38:ed:dd:a0:a0:fd:5a:27:48:45:e7:7d:ee:ca:29:
dd:52:09:9f:2f:47:24:75:e2:00:ed:63:b7:88:18:71:20:ad:
71:6e:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client