
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier: /DhM3ttJIMfePgoAnm/zo6R1d3UGRlad7SYf5UD3uEI=
Subject key identifier: BA:85:AB:3B:EC:6E:50:3F:FB:DE:2E:2F:A7:41:78:27:E6:21:B4:CB
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial: 0199FAD7A3A010FEE08D135C88D9908DF897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number: 0148
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: uEBiGxST1aREmr29T0NFci6XqXftdL1X32bJMsOvoQs=)
2: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (hash: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a3:a0:10:fe:e0:8d:13:5c:88:d9:90:8d:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=ba85ab3bec6e503ffbde2e2fa7417827e621b4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:be:46:ee:70:13:6e:1c:8f:a3:7e:12:d9:
58:38:5a:4c:09:ac:0a:e9:42:09:ab:90:f8:9c:f8:
c2:b8:b6:eb:99:3a:23:3f:cb:6a:cc:1f:e7:1f:a4:
43:51:9c:3c:50:5b:46:2c:53:07:7e:a1:5c:e6:f3:
25:02:b6:74:cf:eb:5a:77:f0:06:76:fe:17:30:59:
42:1a:d5:e8:b8:06:e6:df:da:b6:94:1c:19:03:26:
5c:7e:02:a7:ee:d7:a7:32:ab:22:7c:7b:04:4d:a4:
c4:5f:f9:2d:80:d5:c7:76:cd:23:63:72:89:23:10:
2a:66:6d:37:99:1a:fd:99:05:ff:86:c6:1d:d6:c3:
c7:55:aa:58:56:b1:c8:78:a9:b8:68:d1:b9:fc:b7:
3f:9d:33:ea:10:f4:d8:6a:8a:ef:b8:47:43:3f:09:
e7:44:e7:ea:d2:1e:b8:2c:3e:27:1c:38:7b:08:30:
41:59:57:dc:93:14:ea:be:3e:da:ae:1a:e4:39:61:
05:53:91:ff:91:2b:9f:8c:b7:2d:ae:56:dc:41:6f:
29:99:2b:ee:64:c6:63:80:eb:9f:ca:7f:92:6b:44:
b2:c6:ec:f8:4a:21:1d:4c:1e:82:92:83:71:f8:2c:
af:5b:e9:de:4a:9a:15:4b:a2:01:34:55:04:e2:7b:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:AB:3B:EC:6E:50:3F:FB:DE:2E:2F:A7:41:78:27:E6:21:B4:CB
X509v3 Authority Key Identifier:
keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7b:f9:67:9e:ec:d3:1c:7e:29:7d:d5:ff:4b:24:0e:7f:61:
78:93:b9:c3:d9:b5:57:4d:60:46:1a:f4:c7:79:c3:ec:68:43:
71:06:27:4e:c4:50:ec:8b:95:f9:c9:1b:1d:be:c6:43:12:05:
ed:79:a6:88:c1:0b:5c:ce:22:47:fc:85:9b:23:d6:fe:1e:4a:
37:35:f4:d6:fc:fe:7b:35:d5:d8:a6:be:81:47:91:45:16:c8:
fe:26:78:d3:f6:63:e8:26:3b:8e:54:b9:3f:05:50:9c:73:0f:
47:21:74:2d:f2:dc:f6:d2:1d:d3:f8:16:ac:93:3e:f7:1a:7b:
4b:c6:a7:f0:11:70:40:f0:93:e8:cd:aa:e9:0a:ec:30:df:19:
1b:97:9e:32:f5:63:a2:dc:40:05:b1:01:54:0e:d7:44:ec:c2:
f2:31:e9:c4:71:61:e1:40:6c:27:49:66:e1:8b:6b:f1:1e:ec:
2f:5a:20:7f:1b:1d:a8:26:fd:a3:77:eb:5e:81:ae:84:be:56:
ec:df:c4:a5:c9:9a:ba:6b:c6:a8:4a:e9:58:51:02:ac:7f:7e:
52:f1:20:71:15:cd:0b:49:5d:8e:8b:15:b4:0e:9f:c1:ec:84:
5b:99:a9:5f:80:21:51:ac:ac:b9:71:23:93:e2:15:f9:c7:c4:
b7:dc:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:07 2025 by rpki-client