Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File: FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier: MZarpqApvaB0VgUZZ0NTV0485IPQJC2EYh2wCpw7TVQ=
Subject key identifier: 11:F9:BB:FE:16:5B:BA:00:C1:C3:FE:7C:54:66:52:EC:2E:10:A6:1F
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial: 019A29D56DB981E375472CAB8FF2F766BEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 08:00:44 +0000
Manifest this update: Tue 28 Oct 2025 08:00:44 +0000
Manifest next update: Wed 29 Oct 2025 08:00:44 +0000
Files and hashes: 1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: WZ6BrIWr3mHOdDMJBr5QrUt76TkH3MxwgXllCnyqrFM=)
2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:6d:b9:81:e3:75:47:2c:ab:8f:f2:f7:66:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Validity
Not Before: Oct 28 08:00:44 2025 GMT
Not After : Oct 29 08:00:44 2025 GMT
Subject: CN=11f9bbfe165bba00c1c3fe7c546652ec2e10a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:31:0c:64:b3:db:bd:85:4b:b5:53:6d:42:
64:15:f2:ab:d2:a3:fb:87:6c:d8:83:f7:9c:9f:05:
d8:dc:be:02:3b:bd:28:b9:53:7f:9d:8d:73:a9:8e:
62:ee:72:8c:96:03:a9:0a:dc:b9:a6:4c:e4:42:70:
7d:ad:fd:9b:b3:dd:40:12:fd:e1:41:98:5c:34:5a:
af:86:e5:c0:a8:4a:c1:00:56:29:0a:3a:a6:8e:24:
eb:57:f3:e2:13:34:f3:44:ce:37:b1:bc:3c:7a:35:
73:4c:f5:20:34:9f:99:a7:b5:d0:7b:dd:0b:d0:24:
d4:f4:30:f6:df:f6:82:4e:de:e2:a2:ec:80:94:83:
af:0b:7d:cf:dc:3a:0e:97:ac:de:52:1f:60:a7:29:
be:5b:88:d3:68:5f:51:ca:6f:91:13:62:41:b3:b3:
f0:b5:be:26:14:f8:54:84:20:04:f1:6e:ba:92:ec:
a8:50:e7:a6:a4:a3:60:40:40:08:8d:a3:40:0c:2c:
4d:23:6a:15:69:d8:b3:5f:40:cc:e1:f3:72:65:36:
ff:53:ad:34:6b:06:c7:f9:d0:fb:79:3c:2b:61:0d:
62:13:87:55:a2:05:8a:42:f5:d7:f7:09:46:71:6f:
1b:3b:ed:ab:33:80:7b:dd:d3:26:0c:62:a1:5d:82:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:BB:FE:16:5B:BA:00:C1:C3:FE:7C:54:66:52:EC:2E:10:A6:1F
X509v3 Authority Key Identifier:
keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:5d:59:a1:54:87:56:c1:6f:8a:15:45:46:0c:e6:0d:92:
57:2a:87:b1:00:a4:2d:55:4b:f3:2b:f5:ec:19:3a:b7:6e:c2:
26:a9:5c:b4:14:aa:ae:5f:1a:96:09:fa:f2:cc:f7:63:cd:18:
14:10:a9:21:4c:a2:22:10:a6:d0:91:2d:95:9e:3b:74:2d:19:
5c:3a:af:85:b6:be:36:46:15:3d:de:92:25:7a:d8:55:31:a9:
de:42:18:55:4e:1c:10:0b:a7:87:93:5f:20:e7:4b:fc:06:2d:
e3:fa:2b:2f:9b:56:a6:70:18:42:a1:70:c0:30:fc:81:d2:d6:
24:41:fe:60:a0:29:6e:3a:08:6c:6c:72:dc:fd:14:ad:f0:e8:
6b:29:ea:95:2f:c2:a9:ef:7e:f1:b7:cc:4e:f2:8d:94:8c:94:
3b:86:bc:cb:da:5e:20:9b:57:78:48:b7:d4:0b:81:70:1e:dd:
d3:26:5c:8a:73:af:37:5e:be:68:06:c5:2c:0b:b0:41:98:a4:
13:25:79:01:f5:96:25:f6:cb:18:12:c1:2c:51:52:9a:a2:7e:
05:78:25:c1:dd:9c:08:e4:9c:1c:cf:a9:a4:57:ed:62:d0:f8:
a0:33:e7:25:b2:ce:4b:24:ce:a2:0b:c2:6a:4c:40:08:45:83:
9a:ae:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:05:45 2025 by rpki-client