Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: 1ZXGtDLtt27OlZJnhi/OkA2fRn0E0Ptfw9wNIiaml/Q=
Subject key identifier: 7A:D6:44:BB:C1:E1:5D:E5:1C:1F:B3:A0:7A:72:1B:7A:A3:23:7D:87
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019A1A98AA68CD609FC54E664889DDDF9A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 03F9
Signing time: Sat 25 Oct 2025 09:00:03 +0000
Manifest this update: Sat 25 Oct 2025 09:00:03 +0000
Manifest next update: Sun 26 Oct 2025 09:00:03 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 2TjGh7dW/Ks7iVXXOhDTYqfReQz23QDcm29wFbbhs+M=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:98:aa:68:cd:60:9f:c5:4e:66:48:89:dd:df:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Oct 25 09:00:03 2025 GMT
Not After : Oct 26 09:00:03 2025 GMT
Subject: CN=7ad644bbc1e15de51c1fb3a07a721b7aa3237d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:bf:88:3b:6e:34:2d:3f:f5:50:09:36:3b:
32:8e:13:4b:2e:ba:93:2b:5f:e6:38:51:72:a8:16:
6b:ec:09:6c:9e:89:9f:2f:b6:91:79:5b:9f:b3:32:
fa:82:19:4f:2b:a1:c2:87:ea:18:4f:97:24:a4:fa:
af:9d:9c:8d:cb:e5:3d:83:70:e9:46:fa:0e:3a:d5:
c0:d7:2c:95:0b:16:3b:cc:7e:a5:6a:c5:81:b0:3d:
48:52:db:35:da:e7:f7:cd:34:c1:6e:b0:c2:ae:18:
8a:50:e7:14:40:00:23:01:13:1a:11:37:dc:bd:22:
c6:35:d6:78:05:31:fb:1b:75:02:6e:69:61:9a:29:
d7:86:99:75:36:be:41:66:d1:b4:8c:15:bd:2b:52:
46:51:72:fb:a4:df:6a:45:2c:67:13:f2:58:dc:f6:
27:fa:a9:05:15:6e:91:5e:6d:60:c5:1c:f5:45:12:
71:56:5f:12:0f:82:71:61:df:00:09:42:df:92:df:
4d:b5:42:34:f7:fd:52:05:47:b2:0f:1d:69:a2:a6:
90:74:09:6b:8e:6f:ee:89:71:91:19:6b:22:bb:8c:
5e:22:7e:73:5a:ab:f9:aa:c0:c6:ca:02:48:7d:28:
92:ee:a1:df:b3:e8:a8:49:15:00:ca:98:73:bc:fe:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:44:BB:C1:E1:5D:E5:1C:1F:B3:A0:7A:72:1B:7A:A3:23:7D:87
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:34:44:eb:06:05:72:a1:a3:a3:79:1a:3d:76:f1:fb:0b:
6e:37:a6:2e:6f:96:1e:25:61:2e:bf:67:1f:9b:df:b8:e1:52:
ff:eb:22:86:00:d7:1d:e8:83:68:d3:a9:72:e7:9b:01:f7:14:
8d:db:24:ad:b0:bd:a1:b1:01:ab:2e:5f:45:b2:9b:35:2a:fd:
dc:f7:19:2a:ae:9a:fe:d9:9f:25:da:08:f5:d6:44:3d:8b:8a:
e4:c6:68:c0:a7:38:3c:ea:5c:7e:5d:40:56:71:29:71:29:3d:
5e:bb:6f:e4:03:e5:14:21:a4:cb:a8:2a:ce:8c:9e:a7:7c:51:
9c:37:d3:86:ad:87:1f:4a:1a:4c:01:2c:13:ce:5e:16:83:85:
c4:92:3b:03:e3:6f:e8:11:8d:c3:a3:79:2e:3c:33:18:2f:5c:
0e:3b:14:9e:f6:a2:45:1c:b2:9b:d6:db:08:61:94:7c:08:18:
94:de:44:8a:51:d3:2d:19:76:26:fd:aa:bc:79:df:f1:bf:f7:
ef:15:99:73:39:6a:b7:34:5a:78:a5:0e:09:3b:17:64:0e:6c:
85:6d:c6:b3:16:94:07:a9:36:3b:bb:1d:15:88:71:d8:87:a7:
5d:e1:ff:91:24:11:69:e7:95:97:a3:4a:1a:f4:74:dc:b9:b9:
7d:87:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:03:50 2025 by rpki-client