Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: SGQ+xGet8xauvHmTn9giLjypGKPSW/qr6xDsDHdnRQU=
Subject key identifier: 3B:74:A7:9F:6A:37:75:24:E0:05:5A:3E:98:CA:E3:76:FB:D7:96:04
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019A70DC7B7A67160A0A2B19A3B50A4291B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 11E3
Signing time: Tue 11 Nov 2025 03:01:28 +0000
Manifest this update: Tue 11 Nov 2025 03:01:28 +0000
Manifest next update: Wed 12 Nov 2025 03:01:28 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: HdciBrw3ao3EcQn1AYDTl38jb82l/wD3ACJmS3RA1xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7b:7a:67:16:0a:0a:2b:19:a3:b5:0a:42:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Nov 11 03:01:28 2025 GMT
Not After : Nov 12 03:01:28 2025 GMT
Subject: CN=3b74a79f6a377524e0055a3e98cae376fbd79604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:61:e2:ab:f2:4c:90:75:36:81:d7:fe:76:
48:2e:7c:43:db:75:40:b8:7b:4c:4c:1f:0d:db:73:
64:fd:40:b5:40:a1:5a:ec:12:52:1f:13:cc:5f:61:
44:05:a7:b7:5c:0f:4a:9c:0e:9b:fa:5e:c4:83:8d:
12:1f:f6:da:87:44:77:07:85:9a:fb:03:4a:62:a7:
e7:04:84:3b:68:6c:4d:f9:cd:c1:1d:e3:47:e3:d7:
a4:d7:cb:4b:45:0f:2e:9b:07:7c:37:88:8f:fe:bf:
52:f2:9c:9a:18:f2:ae:b4:21:c7:0e:79:20:a8:56:
69:61:cc:2d:03:b7:58:76:5c:ec:3a:0c:60:14:5e:
6c:68:38:5b:7c:da:4d:f4:25:7d:00:97:76:56:40:
a6:36:4d:9e:ea:e6:49:97:3d:85:42:96:7f:7a:47:
3a:61:32:30:11:00:9c:ab:4c:32:3d:98:77:a6:bf:
22:eb:e7:b8:c6:cd:6c:1e:83:0c:42:f9:cf:20:58:
0a:d2:fc:5f:10:f9:e7:0a:1d:6f:c7:fc:98:79:9c:
47:65:f0:38:40:e8:68:c0:a5:89:86:8c:c2:d2:7c:
b4:19:f9:e6:6e:24:0e:c3:72:94:41:df:c4:9b:82:
e4:7f:c3:a2:b8:2e:6b:0c:5c:ee:51:64:e1:b7:09:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:A7:9F:6A:37:75:24:E0:05:5A:3E:98:CA:E3:76:FB:D7:96:04
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:45:dc:ac:04:94:71:1b:03:0c:eb:8a:8e:10:b8:dd:cb:43:
08:d6:3d:d6:58:c4:b1:77:ec:af:13:ec:b3:3e:f8:dd:28:3e:
cc:6c:ed:97:a7:a9:eb:bd:83:1a:88:d1:b2:3e:06:88:1e:5e:
c3:40:1c:66:63:d5:02:30:4b:7d:4c:f2:d3:90:db:b1:9c:da:
f9:31:5c:d3:01:52:37:ae:b6:1a:a0:8d:43:3f:dd:cc:f2:2d:
0b:b3:d3:02:ed:ad:82:be:5c:02:90:14:b2:15:dd:b7:03:cd:
52:27:09:d2:50:42:3b:2b:54:ce:e6:76:56:85:40:92:03:23:
63:ce:bd:84:fe:e2:5c:de:c4:da:28:e6:a0:e3:3f:27:7e:d6:
e1:3e:35:8b:b8:11:21:3d:91:a8:29:d9:a0:39:25:be:5b:a9:
de:6c:63:e1:71:5d:50:43:d7:18:95:78:98:47:34:c1:3e:09:
c8:d1:33:03:f1:81:e1:fe:d8:e1:5e:b2:d8:58:44:fe:c7:27:
76:e1:59:64:9c:e6:b4:0b:78:c8:98:3d:b4:4f:9b:dd:bf:a9:
ae:9c:76:45:63:9e:4a:d1:48:b5:b2:16:bc:84:6e:c1:dc:e6:
56:bf:6a:23:11:e4:c9:34:1d:ff:d0:0b:56:e8:38:40:d8:f0:
f6:cd:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client