Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File: FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier: NM93r+2lQuPSRbbWyicnxpz4rtvCxXmSCRl8x0LqkAM=
Subject key identifier: B3:59:C7:A8:7B:39:6D:BC:92:F3:DB:1B:B3:44:D8:F6:BD:CE:C9:C2
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial: 019A7293ACE5292A0352B38BFF29EE91B79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number: 1616
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: AIelLBEo91x+IebO6i+Bmq3N4ap4WPfK5A2i3YAMmZs=)
2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ac:e5:29:2a:03:52:b3:8b:ff:29:ee:91:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=b359c7a87b396dbc92f3db1bb344d8f6bdcec9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:d9:e0:d5:6c:01:7e:86:20:50:d9:f0:30:
e0:d0:59:81:94:05:27:a1:b0:64:d6:22:91:f5:03:
a5:e1:f6:82:eb:1e:f6:a6:e3:30:50:66:79:0a:c7:
34:57:e9:87:50:2e:04:98:2f:cf:6a:8d:4c:e6:e6:
98:40:07:7b:33:ea:28:a9:11:87:07:47:d3:ca:b9:
bc:9a:e7:dc:4e:d6:7d:74:28:e7:79:d1:e1:50:e4:
59:15:55:2b:22:43:4f:a1:73:44:7b:fa:07:ab:eb:
21:31:6d:ba:52:79:88:62:96:5c:ef:3f:da:dc:9d:
98:3d:b1:4e:74:35:35:0a:c8:e1:c1:b3:cb:bf:9e:
f6:a8:27:b5:d4:5d:d9:41:d8:52:5f:25:a3:f3:f9:
3c:db:a0:7a:fb:12:ce:de:03:5b:7a:4a:3e:28:df:
95:09:a9:17:6d:e7:af:3c:a4:3c:21:4a:77:f7:0d:
16:35:ff:e2:2e:9f:43:0d:9e:c2:e2:6e:1e:30:15:
31:a0:7d:c7:b7:9d:cb:f5:08:6d:88:53:e4:2d:3c:
73:c6:13:4c:db:57:4c:b0:38:f7:01:54:18:b9:27:
e1:6b:05:88:4a:7e:97:a8:c8:f7:ac:85:3e:3e:1e:
10:83:b8:d0:16:33:e4:f3:b0:92:09:4f:b2:f4:a3:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:C7:A8:7B:39:6D:BC:92:F3:DB:1B:B3:44:D8:F6:BD:CE:C9:C2
X509v3 Authority Key Identifier:
keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5a:c2:f2:48:82:d0:0d:64:0a:19:3a:3f:3b:21:62:24:84:
74:a8:5a:28:11:75:d0:10:95:4c:98:9a:eb:ae:9f:76:a5:31:
40:e0:07:88:18:52:db:a8:78:5e:09:8d:4d:e1:41:d7:72:c4:
b5:64:66:0e:17:45:d0:87:5e:48:58:7f:97:d0:be:e4:e0:36:
8f:72:31:8f:4d:60:c7:37:3c:e7:5d:e6:92:19:c0:8d:31:28:
c2:e1:65:b3:a2:9d:c0:d3:e1:1b:24:43:7b:2a:2f:21:c4:3c:
9a:e6:1e:cd:a6:58:7e:9d:16:9e:a3:a6:86:06:a4:88:47:0d:
d1:bc:95:86:6a:a8:1b:79:23:82:a3:ab:82:d1:e3:d1:58:fc:
94:3e:41:3a:6c:53:7b:a1:d8:97:c7:1a:4b:cb:2a:0d:59:27:
5b:f9:71:a6:a8:8c:c3:1e:d1:47:b1:89:9a:f3:42:c4:fe:f3:
97:67:0b:a2:89:0b:ce:61:cf:94:44:f5:0c:47:35:01:80:b4:
2f:0d:00:be:40:12:f4:b1:52:2d:4d:08:61:f1:9b:bb:28:6f:
8c:53:c8:0a:98:81:dd:62:28:64:fc:1e:e3:27:20:a4:fd:fe:
3c:3a:5c:4d:da:c1:93:21:d5:68:ea:a7:0c:ad:17:2f:04:20:
48:18:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:21 2025 by rpki-client