Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File: FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier: JK6qKAqmxtYoMMsQITl1iZIdud5/oPF22bU6gPX0378=
Subject key identifier: 53:00:E7:ED:D3:C7:68:DC:BA:69:B7:01:4F:5C:45:2E:FE:87:2F:A6
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer: /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial: 019A7294064E4182AC91071244E5D7165101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number: 0A7E
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: V+xSPrcVq/uKt666XnLzLSqg3n0MOOW5PrZ76U9TfGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:06:4e:41:82:ac:91:07:12:44:e5:d7:16:51:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=5300e7edd3c768dcba69b7014f5c452efe872fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:b5:ce:42:b3:78:4e:eb:3f:71:40:ed:ca:
d1:2a:db:e1:19:b8:5f:96:d8:55:57:33:58:5d:c6:
93:ed:ec:1f:bb:3b:53:29:fa:cb:6d:76:d1:75:80:
85:9f:5e:4f:7b:c3:34:78:9a:5f:a5:a8:45:b1:c1:
6d:3f:31:30:94:16:ca:16:51:69:a7:e4:8b:06:de:
8b:11:cb:9d:3b:b3:04:a8:ec:73:4f:b5:62:6a:e3:
1c:3d:54:b3:a5:fc:da:2f:25:11:71:e0:17:06:a6:
6d:ef:02:4d:07:56:68:62:ae:ab:31:df:a0:86:10:
ba:92:c6:1f:8f:66:2c:15:5c:d2:8c:32:7c:eb:a8:
dd:54:93:34:a8:c6:51:bc:1a:6a:8e:59:8a:13:ca:
44:4b:7a:cd:d5:77:f8:a3:a7:58:cf:96:6f:0a:f2:
ca:e4:d5:5e:88:d4:d6:c6:99:a9:0d:a7:0b:00:13:
75:7b:fd:a1:59:8d:ed:6b:01:97:82:74:e0:44:5b:
63:36:1c:66:8a:e6:07:c3:f8:ba:5f:45:eb:53:6f:
96:94:0b:35:de:5b:19:01:e8:c0:40:7a:80:44:7c:
a1:a1:0c:f9:d7:43:a9:b4:a2:6c:f4:0c:79:07:03:
26:e0:05:57:2a:63:5a:8f:bf:3d:32:92:5c:9d:c6:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:E7:ED:D3:C7:68:DC:BA:69:B7:01:4F:5C:45:2E:FE:87:2F:A6
X509v3 Authority Key Identifier:
keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:9a:c0:f5:2b:ca:77:ad:80:db:7d:a8:c1:04:f5:02:84:
2f:7b:f5:d6:c0:30:8e:1f:69:7c:a3:7d:cb:8d:e8:83:69:d6:
62:e4:92:49:8c:d4:bf:51:9d:97:33:4d:2a:a0:f5:25:15:df:
bf:0c:0e:5f:46:fe:aa:d3:fb:17:4d:05:9d:84:03:e3:62:36:
d6:e3:c5:13:a3:07:a6:10:b5:83:82:e9:41:a4:29:80:80:41:
8f:df:23:f9:38:ca:c1:0a:9a:60:c4:f8:f3:79:2a:3f:c6:e9:
11:b3:d5:cf:0e:8f:01:76:fa:8c:f9:48:d3:71:33:5f:08:e8:
f7:46:34:fe:04:a0:ae:29:c0:73:6a:4e:e8:b7:21:3b:e7:5e:
5d:e0:ca:8b:89:7e:8d:5f:a1:d2:fb:14:34:cb:6e:20:d8:31:
d9:96:71:2c:ff:29:e5:cf:da:23:17:09:6b:b4:a0:31:f3:99:
73:0d:be:b3:3f:e4:62:1f:84:ac:0d:47:b6:4a:fe:e0:3f:36:
9e:28:15:7d:2f:30:3f:00:75:49:86:cc:88:10:dd:8e:b4:ee:
75:f9:ee:06:4b:49:48:13:63:46:86:5e:21:d2:76:22:95:f3:
69:2b:fd:89:75:4f:83:52:e9:d6:49:7c:5c:ef:27:13:81:6e:
15:19:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:46 2025 by rpki-client