
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: PQ0BFl128u0Bw/ijpCIvHQUyIdnhIU1Z/lQnGfJAA6A=
Subject key identifier: 21:24:9A:F8:9A:6E:3F:58:3D:B5:A7:35:D2:E7:49:16:7A:13:BE:03
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 0199FAD7F521339D89177E70B7CA057DA68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: vHzBPRQ8EN7iJUReA3OZfYD8uKfs9JQ2jiCSafTlghg=)
2: kG1kgN5nlYEy7ZpCjdikaIa9hV8.roa (hash: /f6LxWrzAnFYTxviTKRbY2oY2ySMF7I5ROIB6zkf0g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f5:21:33:9d:89:17:7e:70:b7:ca:05:7d:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=21249af89a6e3f583db5a735d2e749167a13be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:d5:70:b1:89:a0:4e:b1:84:75:34:aa:f3:
2a:66:a0:fa:d8:ff:46:fe:d8:5b:8c:0c:86:6b:41:
0a:66:19:a5:fa:40:05:eb:94:25:38:98:8a:ac:b5:
e4:34:a7:39:ad:a4:7b:ff:a6:5f:c6:90:a2:c5:24:
0c:93:a3:8c:49:01:64:f4:a3:fe:63:54:64:63:6e:
29:35:fc:5b:20:2a:10:f1:3f:4b:e3:9f:9e:bf:a5:
28:8c:03:88:d8:2f:2b:ac:cf:10:48:16:81:04:72:
62:4f:96:b6:cc:58:7b:6f:1b:04:79:d7:e7:5d:b7:
b1:33:d1:42:4d:07:a8:44:27:0e:3d:11:0b:82:64:
40:1c:07:cb:76:21:6b:62:fa:54:88:8d:ae:03:0c:
ae:d1:55:d8:48:b9:5d:43:11:e2:54:01:13:d1:0c:
4d:97:c1:b7:57:c9:96:f4:3d:29:fa:e4:1a:55:e2:
59:a8:e5:fe:2a:26:15:a1:de:9c:32:f3:46:6a:f0:
23:c9:0f:b6:f2:22:8e:cd:cb:42:18:51:bf:55:c6:
06:a9:87:07:f3:75:7e:22:54:e5:b7:ed:09:da:8b:
d5:80:49:13:c1:39:27:11:34:21:43:79:bf:f5:f2:
e5:67:fa:48:6b:43:2d:b8:66:1f:69:57:3b:cf:37:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:9A:F8:9A:6E:3F:58:3D:B5:A7:35:D2:E7:49:16:7A:13:BE:03
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1e:ba:fe:43:7d:c9:b9:6f:b9:3d:1e:18:d6:2a:7b:fd:0e:
6f:c6:c5:21:83:39:68:c3:de:6d:42:78:31:de:eb:2f:94:52:
46:67:26:1d:c1:2d:5f:7f:af:d1:57:05:eb:7c:8c:b2:42:f8:
b1:60:fd:a4:ca:25:3c:66:db:34:5e:c3:2d:bb:11:3c:62:df:
0b:23:4d:3b:c1:90:41:1c:b4:0c:1e:80:ee:f8:b2:2e:cf:f8:
d0:fc:a8:50:c6:44:af:56:0d:8c:eb:4b:bd:4f:01:5d:20:a8:
cd:4e:cd:c8:29:0c:d4:6c:bb:8c:33:44:a2:1a:73:13:6d:2d:
18:3e:9c:48:28:1a:a6:bb:42:fb:21:cc:aa:6f:29:ae:4c:3e:
bf:98:f7:2f:8e:c9:c3:5f:95:d5:62:5a:d9:4f:3f:02:36:1f:
1a:88:3d:dd:59:f4:b9:d6:41:2d:6b:f4:9b:1f:1b:23:2f:46:
59:d1:d5:7a:11:a0:61:19:b1:73:a3:35:b5:23:8e:a6:6d:8c:
f6:e2:f5:ce:01:2e:47:a9:3c:60:a4:68:05:b7:59:0e:23:1b:
6c:eb:fc:32:5f:80:9f:e9:64:ff:bf:3a:d6:eb:0a:01:9a:5f:
c7:c8:36:06:8a:d4:76:93:79:7c:1d:ea:8c:8d:22:de:e5:25:
0e:14:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:04 2025 by rpki-client