Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: DS6i8bzIOkvUI5yQk54H7zb/cima/+yO9KMhCn9Q7k0=
Subject key identifier: EE:8B:62:9B:E5:50:3A:AA:A9:B9:88:00:48:B3:23:8E:3A:A4:9B:44
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019A71B833E2B819CABCE469401D87C3DFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: GRpdjpKvxpNmfX8ZloRaeG0vGF+viR3uia/e1pyIg7U=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:e2:b8:19:ca:bc:e4:69:40:1d:87:c3:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=ee8b629be5503aaaa9b9880048b3238e3aa49b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:1a:e7:d8:eb:be:d9:b4:c7:75:39:3a:f1:
a8:4e:f7:34:f9:cf:5c:99:7d:e1:a2:52:3e:91:32:
d1:2a:f0:f2:37:6f:06:e9:74:62:6d:e1:09:27:41:
0d:f3:db:2f:e9:aa:2b:28:10:a0:8e:33:28:b0:ab:
51:c5:fc:81:05:e4:f3:a5:62:48:c0:bb:4a:04:eb:
9e:a0:61:3b:7c:dc:e2:71:51:bf:3b:af:b8:72:4e:
e7:05:f7:5b:a7:5f:b4:a3:d4:fa:9a:15:5e:a6:63:
c9:df:66:b6:09:fa:15:88:fa:a2:6f:01:52:17:d1:
d3:8d:9a:b2:ce:36:9f:d0:7b:a9:9b:37:42:a3:16:
c8:58:ae:7e:39:33:d6:15:80:63:4c:97:4a:61:fa:
24:08:0f:33:1f:a6:0c:89:13:a8:a6:f0:37:2c:ec:
02:25:2d:31:db:45:5a:07:8e:22:1e:60:89:6c:84:
14:10:d2:41:15:61:69:02:28:97:01:7c:17:40:1d:
fa:25:e5:6b:8d:70:c6:9a:51:04:9a:47:22:1f:7e:
52:fa:d0:c3:e1:14:eb:dc:f5:2f:16:39:40:6c:56:
3e:33:52:c5:6a:29:ff:81:1b:27:b1:f4:37:10:bc:
c2:bf:3c:a5:b1:8f:94:6e:2e:4c:3b:3c:54:74:ab:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8B:62:9B:E5:50:3A:AA:A9:B9:88:00:48:B3:23:8E:3A:A4:9B:44
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:cf:30:77:43:96:58:d1:29:82:a8:8b:b7:c7:ab:bd:6b:
a1:e6:f1:13:87:fc:0c:0a:af:b3:00:13:c3:49:48:5a:4a:76:
d9:23:21:73:39:b4:a0:63:be:39:65:88:32:c9:2c:13:b6:8b:
f5:79:0d:e9:c6:63:93:24:20:c8:5c:5e:bc:39:e2:74:0f:07:
42:d1:5c:61:ee:e0:9e:8f:f9:db:d8:4d:d8:af:02:05:a9:9f:
e6:45:e8:48:7f:78:fe:00:d4:33:70:5f:a3:45:c0:bc:5f:32:
7b:6b:ae:d8:28:2f:45:33:85:45:0c:3f:21:d6:2a:9e:e1:f8:
ef:9e:6e:7b:01:86:d4:1f:31:7b:10:c8:25:d5:6f:17:eb:8c:
52:81:e5:5c:0a:a6:f6:c3:c7:48:33:78:6a:06:6d:26:66:c2:
49:cc:ca:3b:08:04:d2:e3:06:47:4b:6b:a1:92:a1:68:f3:f0:
73:d8:07:bf:69:b6:20:b3:47:52:ee:03:57:c5:aa:ba:7d:b1:
38:d1:d2:2a:fc:13:43:de:75:11:84:d1:cf:32:e0:67:f0:da:
4b:6b:87:ad:61:89:b6:33:0e:80:30:d2:0d:43:87:0d:01:2c:
41:d1:da:bf:69:f8:3e:18:f9:c1:51:9e:30:23:40:30:da:b6:
1d:e5:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:56 2025 by rpki-client