Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File: FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier: S60f95zPXFkyPaMDUQCWYXWTeWDMLfwKNFKxOZX7Zvo=
Subject key identifier: EB:BD:53:CF:65:99:BA:A6:4A:60:4A:D2:F0:2F:EE:9F:74:19:3B:A5
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer: /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial: 019A70DC432D1BBEC010A81F7CAF44911F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number: 0312
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: CWo56C4NeIbkbNy2mH+2ykrvn8bQyxbEi+cl5zuLURM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:43:2d:1b:be:c0:10:a8:1f:7c:af:44:91:1f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=ebbd53cf6599baa64a604ad2f02fee9f74193ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:ec:30:bd:10:30:d9:26:29:72:78:a2:03:
3a:ae:5b:31:3e:71:e2:f3:ba:fe:b7:47:ea:4f:25:
81:54:8d:43:15:ea:1a:81:29:11:ac:6e:b9:af:ed:
58:92:67:65:df:62:86:42:c8:7d:16:be:27:62:23:
8c:9b:d7:c3:ed:22:f3:70:75:c2:64:07:56:32:b1:
97:53:57:de:c5:5c:6f:37:76:29:73:48:a6:a0:b5:
ce:aa:f9:2b:a6:4f:67:ea:f2:0a:ed:49:46:77:cc:
06:03:37:0a:c6:b8:6f:a6:bd:75:f1:6b:0f:a1:a5:
0c:30:11:7b:25:29:5e:7f:23:0d:20:a7:e1:88:70:
ba:1f:89:a1:c7:6f:a2:10:0c:fd:c1:07:ee:a8:a3:
cc:18:a0:57:91:08:b7:e2:fa:85:0c:06:e8:dc:89:
da:60:44:5f:ee:dd:79:eb:fb:29:ac:96:3b:fd:2d:
53:49:c2:24:9b:74:a0:cb:a9:f4:f1:5a:2b:07:7a:
a9:26:01:cf:04:82:84:2b:21:cd:7e:43:75:90:c0:
59:8a:db:c7:53:7a:a5:ff:d2:11:a6:c2:9c:fe:16:
c4:7f:e6:74:71:63:ed:bb:ba:aa:21:1b:e1:27:c3:
45:0e:85:c9:43:6e:53:b3:83:d2:b3:7b:24:3b:92:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:53:CF:65:99:BA:A6:4A:60:4A:D2:F0:2F:EE:9F:74:19:3B:A5
X509v3 Authority Key Identifier:
keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c6:d7:a9:5d:63:1b:ca:4c:65:bb:68:ac:57:c0:2b:fb:cc:
2e:25:68:ee:1e:e0:e6:84:23:26:bf:6b:0d:b7:6b:ef:86:ce:
08:83:e2:38:ad:58:37:64:8a:43:52:1e:15:33:5d:8b:2a:d2:
8c:71:94:e0:89:59:7a:d7:c9:1e:d9:8c:0e:6e:5a:97:66:6f:
50:c0:5c:41:4c:c0:a3:e3:98:b9:f5:1d:0e:2b:5b:b1:e3:d9:
d2:0a:3d:ae:f1:a2:cb:00:79:e4:6f:73:84:a7:5b:e0:44:a1:
56:ea:e9:c6:88:49:44:62:8b:47:15:f6:8b:d9:a5:da:6b:2c:
4a:66:ee:f7:f5:2e:8c:13:06:67:65:17:1b:e9:43:0a:97:53:
7e:68:e3:e2:fe:72:86:8e:de:2a:ec:a3:fe:3e:19:b4:a7:cf:
04:7f:b6:8f:89:43:c4:95:17:0d:b8:cb:87:97:9f:b3:4e:27:
6f:fc:68:c8:8b:d0:bd:5f:97:a7:7f:28:03:33:aa:4f:d6:b5:
f3:65:f2:b1:b2:47:20:54:97:e5:70:60:3e:e5:72:d2:ed:bb:
11:da:5c:c2:f6:e3:f5:6e:45:b5:4e:78:2c:d0:03:53:69:9d:
59:84:1c:1e:a7:b3:06:78:77:fa:ff:54:9f:fb:30:d1:48:67:
61:4b:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client