Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: ABYJfTFEMoupgjmk+FSG9lgi9gD1Ec1NZyvF86qaEjA=
Subject key identifier: 4F:85:75:1D:73:71:FA:80:75:9D:40:79:7B:D0:E0:6B:EF:D3:3B:6D
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 019A7301C72B09DC3EC71312ED338D536C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 1392
Signing time: Tue 11 Nov 2025 13:01:27 +0000
Manifest this update: Tue 11 Nov 2025 13:01:27 +0000
Manifest next update: Wed 12 Nov 2025 13:01:27 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: /LGvgU2m6pcK4N7yS5zEzoTQ1OSkRM+x3nrQLNjgaIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c7:2b:09:dc:3e:c7:13:12:ed:33:8d:53:6c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Nov 11 13:01:27 2025 GMT
Not After : Nov 12 13:01:27 2025 GMT
Subject: CN=4f85751d7371fa80759d40797bd0e06befd33b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:87:c5:c2:ec:e6:23:93:ed:f8:bc:f7:65:
23:e0:44:e2:46:57:0c:33:cf:ac:17:a2:0f:20:40:
5b:2d:62:11:79:7c:e8:59:95:68:79:6a:14:b2:d0:
a7:92:27:ef:47:b6:c7:6c:35:0f:5d:1a:dd:1e:82:
b6:97:b1:e7:d3:81:ae:8a:a9:a8:26:d1:de:f0:7e:
9b:4a:99:ca:c0:e0:99:1e:d0:3d:65:65:20:96:2a:
1e:bf:da:9f:f9:6d:00:8c:56:47:88:7a:2b:49:32:
04:96:e0:0e:93:11:33:dc:61:24:44:58:81:3c:83:
0e:59:b5:a2:d8:d5:cc:73:91:09:2e:d1:3e:0d:a8:
6d:3a:30:e7:91:e0:76:8e:23:b9:7c:b9:79:aa:53:
ee:a8:df:f9:b1:0a:14:b9:6e:a6:57:81:e2:ca:51:
78:4f:2d:64:b4:a2:d8:13:b8:81:59:ea:e4:7a:7f:
95:6f:a4:da:b9:81:e6:fc:e3:35:09:6c:30:0d:5f:
c9:64:25:4b:af:23:7c:0d:71:fc:35:1d:03:95:6c:
1e:ff:f0:cd:e7:b1:4d:02:7d:0c:ce:6a:5d:f8:c1:
55:61:a7:e5:b2:be:37:53:b8:20:c7:af:05:5c:eb:
22:fa:19:92:0c:a0:23:68:c8:9c:8e:a7:67:22:54:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:75:1D:73:71:FA:80:75:9D:40:79:7B:D0:E0:6B:EF:D3:3B:6D
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:ed:2e:17:7f:21:07:ca:5b:36:f3:d4:68:f3:3c:04:74:
5f:f7:28:d4:b1:f6:36:87:ec:10:f2:7b:d7:b6:4c:12:0d:be:
26:ba:0d:1c:15:74:dd:b7:af:28:b3:a4:8d:78:39:62:7d:27:
04:51:49:89:42:fa:77:18:6f:6b:87:c0:be:89:85:e1:a0:f8:
f5:86:33:0f:f8:05:b6:94:6a:a8:64:55:09:0f:35:67:53:75:
6f:fb:f2:12:9d:58:ce:ef:44:bf:8f:93:4b:98:f5:4f:f6:f8:
eb:6d:d6:88:f0:e9:16:f3:6c:8b:b6:4f:bd:c5:79:db:5e:6b:
a6:e5:53:35:54:d4:6a:9c:c9:78:17:4c:0e:3b:d2:89:a2:45:
82:a6:93:41:08:d9:96:04:7a:27:9d:c6:fc:ea:73:61:39:ce:
03:56:26:64:2f:97:de:de:fb:5e:a9:a9:07:8b:34:48:84:c1:
52:54:62:07:e2:eb:36:ec:d7:26:21:6f:49:bd:42:b1:a4:07:
9c:fa:e3:c5:d7:66:1b:ac:76:c2:c6:30:cd:73:fe:de:b6:34:
45:31:b0:d2:49:d3:4a:79:59:4a:b4:18:ae:8d:04:0c:d0:95:
10:59:10:7b:7e:b6:07:71:bc:58:69:02:80:bc:83:6d:6c:d6:
ff:89:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:39 2025 by rpki-client