Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: sFaQa/UkOkSTh1ONllXhAcrhza041bJF18jHnEcu+9M=
Subject key identifier: 10:09:68:A4:9B:FE:E2:83:93:27:C1:A2:A0:DD:A1:7E:56:EC:84:AA
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 0199FB0EF2719DE3421BBED018743AB767B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 15F2
Signing time: Sun 19 Oct 2025 06:01:24 +0000
Manifest this update: Sun 19 Oct 2025 06:01:24 +0000
Manifest next update: Mon 20 Oct 2025 06:01:24 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: nwkDPPp0jY+gyhJfa6YT7MzI/2tAFW+KnlAQAT7pF5k=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f2:71:9d:e3:42:1b:be:d0:18:74:3a:b7:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Oct 19 06:01:24 2025 GMT
Not After : Oct 20 06:01:24 2025 GMT
Subject: CN=100968a49bfee2839327c1a2a0dda17e56ec84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:7b:d3:c5:5d:b7:32:58:94:a2:9e:fa:2d:
68:31:ff:38:91:73:4e:4d:5f:5f:7a:68:14:3a:84:
d9:c4:e4:5e:9f:6c:36:c0:65:fa:08:1d:a8:59:89:
dd:67:cf:90:a1:aa:c8:af:32:30:af:b1:dc:76:ac:
9e:7f:b8:80:bc:58:3c:b9:b0:83:81:af:3c:dd:dc:
97:c8:74:9e:1b:fd:44:80:25:ae:31:b5:50:51:ae:
34:48:7b:c4:e2:94:72:12:05:7a:b9:60:21:ef:bc:
d2:e9:d0:8f:a8:98:74:f6:64:e4:1e:04:72:cf:f0:
b8:a6:57:8f:b1:ef:a1:70:ae:1e:b0:f6:ca:41:bf:
f5:55:8b:e7:56:99:f5:2c:a1:18:66:f1:a0:96:57:
d2:28:01:ea:3d:38:37:9f:88:52:6d:ba:1b:a6:db:
61:aa:b6:11:ec:b7:d9:a5:11:2b:47:0d:2c:71:53:
76:97:b9:6d:6d:a0:9c:34:32:a3:4e:8c:b5:17:50:
1a:1b:04:e2:2d:6a:4e:fe:a8:85:d7:82:ce:00:f5:
93:fd:4c:e1:09:01:cb:93:4d:8d:a7:b1:4c:a8:4d:
78:43:ad:03:26:af:70:5a:b0:95:36:7c:42:fb:15:
bd:15:6d:8b:3a:73:94:59:9b:02:1a:f2:34:f6:3b:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:68:A4:9B:FE:E2:83:93:27:C1:A2:A0:DD:A1:7E:56:EC:84:AA
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:eb:a9:dc:1d:27:ed:9e:51:9e:45:46:a1:f2:8e:b3:f3:
1d:4c:4c:14:a3:45:d7:9a:5d:d1:39:9b:d6:14:b9:07:99:49:
8f:a3:2b:17:86:3d:8e:64:04:4c:73:99:ba:8e:82:dd:22:bc:
b4:1b:b1:12:5d:bd:a4:7f:1b:f5:8f:63:40:1a:44:3b:a4:11:
5b:0b:81:af:17:ea:ae:26:b3:75:bc:e9:ee:07:57:85:2c:ff:
87:60:a0:5c:1b:8f:a6:10:70:d7:6a:83:ba:95:eb:e8:09:8a:
ba:c3:e1:1e:8a:3e:b6:ba:cc:45:f1:cc:58:ee:db:3d:6a:09:
cd:45:7e:5d:16:3b:fc:af:27:a2:d4:f1:a8:06:c5:72:75:0b:
2e:16:0f:b1:0b:ab:d8:dd:0e:80:ac:c9:b4:db:be:12:b2:b6:
32:d2:60:b9:79:53:83:0a:38:27:e2:27:d8:41:fd:bc:0a:c2:
a3:5f:0f:08:8e:6f:30:2d:8d:25:70:7f:a1:2e:f7:c1:c4:35:
63:12:a9:2f:88:d5:3d:19:86:0f:82:ce:22:f9:06:7f:bd:6e:
c9:78:3f:1e:19:2e:2d:c7:bf:80:5e:d3:92:7c:bc:35:44:e3:
96:67:e8:4a:d5:37:87:f4:a4:51:50:be:0d:99:dd:20:42:b4:
aa:6f:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:14 2025 by rpki-client