Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: 1RyNbpzj5Vx6xdSDKphPB5DOWbthUMMp1x/F2BC6eFs=
Subject key identifier: 47:D6:A7:D8:C1:2A:1E:9B:FB:88:C5:12:53:2F:AE:85:4E:47:E8:5D
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019A047F3E7054FA4FDD2AD56782066E50F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 04C5
Signing time: Tue 21 Oct 2025 02:00:39 +0000
Manifest this update: Tue 21 Oct 2025 02:00:39 +0000
Manifest next update: Wed 22 Oct 2025 02:00:39 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: WVfF/O9bRB3d9PIgdyeFbCpaMc+48dL/Egg3axftpBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:3e:70:54:fa:4f:dd:2a:d5:67:82:06:6e:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Oct 21 02:00:39 2025 GMT
Not After : Oct 22 02:00:39 2025 GMT
Subject: CN=47d6a7d8c12a1e9bfb88c512532fae854e47e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:6c:b1:7f:ef:12:2c:da:86:c6:14:56:f8:
aa:65:4a:d4:59:36:4c:45:27:ef:8c:19:d6:ac:a1:
1d:01:19:8b:d6:1f:ae:9c:f7:95:dc:38:ec:ca:b4:
32:4c:5f:f4:0e:e1:59:54:ca:3b:fb:e9:21:1e:fa:
8d:f4:e0:09:f9:d3:5b:ae:5d:cd:8f:96:83:a0:97:
64:fc:77:9f:e8:f5:21:49:f4:4a:20:f1:84:fe:58:
d4:ed:dc:7f:d0:6a:65:7e:1f:d6:cd:d7:86:9a:40:
06:7f:6f:92:71:12:00:06:0a:17:d1:b3:e7:8a:fd:
3f:65:77:43:48:a6:18:ce:86:70:57:43:76:84:85:
f6:f7:7f:a6:64:fc:a4:02:e9:d0:98:14:84:3e:a6:
2a:7f:de:22:50:a1:90:44:fd:b3:75:42:db:f9:39:
ef:32:2f:5d:d7:e1:f3:b8:52:54:6b:dd:3a:69:0c:
f9:bb:69:29:f9:c0:a3:11:b7:9c:a9:d6:4e:23:61:
d6:1e:82:e2:66:26:5a:4f:0c:70:ab:31:7b:cb:b6:
3f:9e:50:e6:52:2e:d6:e6:2b:d1:b4:cb:e7:dc:ce:
7e:4c:76:89:02:ed:61:18:ec:a3:10:33:3b:fe:77:
e0:4e:62:54:a8:7b:29:ee:4f:e5:d1:5c:32:c7:00:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:A7:D8:C1:2A:1E:9B:FB:88:C5:12:53:2F:AE:85:4E:47:E8:5D
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:a2:a1:c2:d4:9e:9a:a4:66:26:0a:9f:83:be:13:03:cc:
38:e9:10:a1:74:24:bf:e8:62:3f:d6:9a:c6:97:38:9e:05:f2:
b1:4f:76:ca:27:e5:04:6d:65:1b:68:f6:9a:8b:a2:93:0b:c6:
1d:ce:ea:a1:9e:38:f4:3c:82:76:ef:4f:5d:f0:a4:3b:a3:81:
34:eb:b3:ae:4f:46:97:72:34:25:c2:76:26:94:97:cd:a6:7d:
ad:ed:e5:48:b6:25:43:b1:15:5d:44:c5:cb:57:8a:07:a7:36:
12:8a:6d:dc:d6:9b:29:08:43:0a:84:c2:ee:10:e9:50:b5:5b:
e3:22:f5:81:ea:fc:77:e4:37:c6:f4:90:0d:69:1c:25:e7:0a:
db:d7:77:ff:13:fa:4a:1d:86:3e:7b:00:08:55:03:3e:25:19:
d0:b4:c1:ee:02:a3:fd:7f:04:f9:e3:d5:2a:d2:72:68:d1:e0:
8d:36:e2:b1:74:7b:fd:1e:d1:1d:8e:0b:0c:8b:ae:de:c7:5b:
05:47:7d:f4:1a:85:8c:78:9f:a2:2e:e8:44:e3:b2:ab:08:b8:
b8:33:c4:ab:c4:89:8b:3e:ff:2d:ee:9a:57:10:1c:a4:10:0d:
52:61:47:28:2f:d5:98:b1:dc:2f:93:3c:ac:7a:85:63:c2:08:
7b:36:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:41:35 2025 by rpki-client