Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: jcHL0W/MbgOdJOtXdzjGf0vLh6vztfC7txbQMjON+hk=
Subject key identifier: 6C:23:17:A8:EF:56:8C:96:29:E7:14:BA:48:AE:44:06:C4:B5:82:91
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019A71EEF19EDD159055D3932AAFFA3E581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 065F
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: uOD5aUyIWIbavWT3Kbgl+zubr/IRjXysNxneI6V8QEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:9e:dd:15:90:55:d3:93:2a:af:fa:3e:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=6c2317a8ef568c9629e714ba48ae4406c4b58291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:f1:d9:20:5e:8e:72:83:aa:e6:8c:0b:1e:
3f:61:73:63:f7:ad:0f:44:1a:6d:ce:c8:52:99:20:
a6:ec:ee:97:31:aa:b4:1a:6b:09:28:c3:41:74:b9:
81:ea:21:b7:81:d9:2e:1f:38:d3:82:e6:8c:05:b6:
ac:30:9c:b4:b9:a3:a1:6a:16:5d:82:ae:21:5e:a1:
1f:77:06:61:f4:2b:e0:c9:71:10:72:86:a0:4e:c0:
86:fc:63:6e:6e:dd:be:0c:db:b6:1a:6b:77:ac:95:
48:a5:a2:19:c9:b0:f8:af:f0:d4:45:ae:a7:3a:be:
4c:22:a7:41:4d:be:b3:b4:7c:d5:64:d8:58:e9:76:
c4:48:be:6f:7a:5b:74:56:bc:d3:96:ca:0b:b1:8d:
eb:c4:ca:b4:d3:38:e5:56:c9:a1:24:42:e3:68:91:
42:b2:61:ed:39:34:86:36:aa:ba:db:b4:86:4e:2d:
ce:03:3d:68:aa:c0:71:5a:37:17:5c:4f:3e:fc:95:
26:a7:f5:b7:5d:ac:05:7f:2b:92:8b:0b:a8:77:86:
60:a6:c2:7f:cc:57:ea:d6:74:8a:fd:64:3c:bc:4b:
fb:e6:34:f7:91:32:59:1e:4a:43:7e:b1:7b:5e:fe:
81:2e:10:ce:e6:51:03:86:ed:b6:10:3b:65:5c:45:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:17:A8:EF:56:8C:96:29:E7:14:BA:48:AE:44:06:C4:B5:82:91
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4f:b0:1a:d9:57:17:ea:d8:d5:38:c0:9d:14:7a:43:e0:b8:
40:cd:45:11:80:16:d2:8b:db:1a:42:e1:12:16:3f:60:ee:64:
2e:4e:53:f3:06:7d:a8:c8:9d:a2:52:f1:19:25:21:d2:5c:29:
ee:b4:34:c1:63:44:d5:71:fd:f9:06:6e:76:16:6c:5f:e7:7a:
6e:fb:c6:ff:ad:ba:6b:99:24:36:b6:b1:4c:a6:0d:24:84:c0:
ad:01:9a:30:02:02:b4:f2:c5:96:df:a3:1a:59:d5:f3:c8:40:
17:c7:97:5f:19:fd:30:9f:5b:d5:a7:fd:28:06:2e:a7:81:e0:
9e:2c:86:65:50:d5:d5:5a:f0:b2:14:75:f6:03:7c:cf:99:c3:
81:a2:0c:a9:ea:f6:ac:68:d6:12:0b:bf:2e:67:ec:98:6c:07:
a9:1f:a1:9c:b9:8b:28:14:d0:e8:69:60:70:f9:c9:9d:0e:8c:
b2:f1:70:92:63:7a:1c:46:ec:3e:a4:19:92:45:5e:3a:c7:69:
b7:c1:58:89:2f:d5:c2:70:a7:dc:1e:92:01:60:8b:99:b8:93:
d1:5f:a6:cc:4b:44:06:1b:aa:49:e3:ea:96:f9:27:1f:1d:dc:
ff:fc:57:75:e3:09:4a:33:e0:12:eb:ba:e1:3c:71:9d:7e:f7:
5f:0e:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:54 2025 by rpki-client