Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: +JIjPmEBmEccOpd3uXaO2/dNqBJImQgF9Z2TADNlTOE=
Subject key identifier: 1E:9C:44:93:5D:45:0F:A6:EE:70:71:B9:67:1F:F0:F1:B4:A1:5E:A4
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019A71B85A5B26245281A7EF5DE4CC7294CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: pk2XiEhFdp2xtWuhaWkBJfSxdu9Jn+gvPbRQD+SskAQ=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5a:5b:26:24:52:81:a7:ef:5d:e4:cc:72:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=1e9c44935d450fa6ee7071b9671ff0f1b4a15ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:bb:27:68:6c:22:83:e2:45:e2:fe:fc:0c:
03:1f:32:c8:76:82:68:ab:28:6f:76:36:1b:54:6c:
0e:10:ac:8a:16:23:ff:5b:85:b3:bb:60:fc:e9:0a:
da:c6:39:0f:72:42:45:ef:bf:45:e8:19:16:5a:e5:
a3:3c:d6:47:d4:cd:b0:21:33:aa:38:81:c1:55:13:
7b:38:45:5f:b0:4e:3a:1e:62:5e:e6:07:5a:29:c7:
cb:68:52:07:e2:a6:29:ed:14:0c:a9:0a:88:c7:9e:
96:2c:b9:8d:d4:80:18:d7:89:7d:92:e8:9f:0c:6b:
00:fe:5a:2b:34:52:8f:66:34:fc:d2:85:30:4d:3d:
6e:ef:54:2d:12:c5:69:be:74:fa:a8:77:6d:d4:ec:
46:8a:29:0a:ec:11:9a:d0:45:1b:00:55:03:99:50:
92:fb:01:ce:ba:ca:6d:cd:5a:12:61:e4:ea:87:f2:
44:c5:eb:2b:2f:de:5f:bd:9e:dc:8c:84:ea:54:3b:
7e:72:b9:cb:3b:90:20:32:97:06:e3:99:aa:97:1a:
67:6b:5c:95:42:e2:a1:cd:cd:dc:ff:7d:94:35:c0:
27:c8:d2:fd:a9:71:d5:ac:d2:f7:c1:94:52:15:60:
ea:07:3e:46:c7:a5:db:9f:00:08:4c:dd:2b:a3:6c:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:44:93:5D:45:0F:A6:EE:70:71:B9:67:1F:F0:F1:B4:A1:5E:A4
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:2c:d7:5f:1d:bd:c0:d1:09:7d:29:a8:4f:78:bb:51:37:
c1:f8:56:23:82:9b:f8:4e:56:df:6e:95:38:cf:56:38:dc:c3:
f6:b1:7b:5a:12:2e:fe:2d:02:38:f1:16:e1:d2:a7:5b:2b:8b:
ed:2e:e5:29:07:99:8a:b3:53:8b:41:0d:fa:30:a1:b0:cd:03:
73:01:aa:08:38:bc:e5:45:b7:f2:80:fb:e8:f8:51:98:e2:6e:
09:3f:38:91:08:a4:9e:2d:fd:87:15:f2:bb:25:97:4b:47:c1:
db:5e:56:5e:65:0b:de:c4:0d:8c:13:23:bf:0a:0b:77:95:19:
80:38:b3:f8:7f:38:5a:1e:5c:1b:cd:9e:67:62:a0:19:be:59:
5c:c7:39:5b:57:83:4f:ec:ca:c5:cb:f3:47:25:37:1c:61:f7:
75:c0:71:f7:86:6c:b7:ed:55:c8:77:ee:8d:05:cb:98:05:62:
30:77:9d:5f:56:f2:bc:18:03:5d:a5:56:ec:41:1a:fb:bc:3d:
e8:53:83:f2:a8:8c:8c:6d:51:95:06:f5:00:bc:83:79:fb:1a:
86:26:49:08:5d:97:e3:6d:d8:d1:64:88:24:eb:cc:bb:98:73:
22:3e:cf:55:02:54:ad:f2:bc:4b:dd:de:bb:4b:e3:37:1a:47:
2d:02:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client