Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: 5AkEYdqK12aCKswDo0eKY+hFlFBBKwRcy/U3AYbdC/k=
Subject key identifier: 40:84:93:BC:D3:17:A0:69:9B:91:2F:2C:84:51:70:C4:95:85:61:09
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 0199FC58F1AB89266C43878BBF75F8E6EDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 048B
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: r6SfwM9kyrelBRhF6AUpTRD5otuRbEYyH4dNvPRLtbc=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f1:ab:89:26:6c:43:87:8b:bf:75:f8:e6:ed:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=408493bcd317a0699b912f2c845170c495856109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:ee:f2:f9:b6:21:b2:c5:fd:2c:16:c5:ba:
73:31:99:bf:56:db:ae:2c:ad:a0:9b:57:e0:54:dd:
6b:54:05:34:41:fe:34:7e:8c:d9:27:dd:2a:d6:26:
06:cf:67:87:c0:e7:42:8a:47:f1:1a:48:e7:87:25:
01:8f:ba:bc:e1:41:e1:d2:eb:7e:34:a9:e6:c7:0c:
b9:b5:b1:cb:6e:4e:97:e0:61:05:fd:b0:96:61:f6:
6c:ea:85:24:8a:60:ba:29:74:d5:25:96:a1:4e:aa:
e5:ad:64:1d:9a:7e:e5:45:9f:78:ac:40:08:f7:56:
10:42:82:7e:d2:be:a7:f0:68:70:1c:75:95:08:80:
2f:47:b6:79:24:99:1a:2f:0d:e5:d0:ff:9e:2e:5c:
74:68:15:93:6f:13:df:c8:1c:c6:ce:4f:22:da:a3:
49:02:e5:f0:5a:2e:3a:23:78:0b:0e:f8:bc:bd:7a:
0a:ae:c1:55:fe:96:e9:3e:1e:03:c2:5b:93:fb:fe:
39:a2:b3:38:11:f6:57:26:ff:30:09:36:e9:16:b4:
e9:d4:59:d1:b0:37:76:5a:64:08:e5:c3:e2:9c:fa:
32:f7:8b:60:a4:66:9d:b7:67:9e:22:ce:c0:ab:07:
9b:1e:a6:58:a7:01:23:60:af:f8:f8:b9:7f:92:59:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:93:BC:D3:17:A0:69:9B:91:2F:2C:84:51:70:C4:95:85:61:09
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f0:c1:a3:88:63:44:a2:1c:f2:9a:5e:e6:94:03:43:d0:07:
66:9b:43:ce:bf:9d:28:a9:11:c2:5a:89:d7:b3:5a:ef:7d:d1:
54:1e:1a:02:06:ac:cc:73:26:14:3f:7b:36:dc:25:d9:0f:be:
b8:0d:28:41:a3:46:5e:36:b3:5d:bc:eb:6c:49:58:ff:88:5b:
ec:b4:2a:a0:7c:c0:61:04:ef:bc:26:f0:11:b2:2d:19:af:b7:
8e:a1:cc:50:ee:4d:a6:a3:d1:2e:92:a1:0b:4a:ac:17:46:9e:
4f:30:1d:24:a9:d7:b9:23:f9:30:7a:f6:fb:d2:d3:90:cf:91:
0d:89:34:7f:f1:a5:23:24:54:94:4b:70:89:30:28:85:62:58:
41:af:fc:c6:90:da:c4:51:85:85:a8:1b:3d:0c:5d:b0:17:1c:
8d:77:a6:2d:6f:24:fb:cb:0c:03:40:10:43:46:14:8b:b1:93:
69:7e:fd:0c:b9:5a:56:5a:9c:41:7b:1c:7f:6f:f3:8e:e3:24:
13:15:5a:65:b2:45:f3:8d:7b:54:7f:81:52:b4:05:03:37:6d:
d8:1c:90:74:02:8c:d5:00:ca:6c:bf:14:e0:22:10:1a:c5:a0:
33:b9:e0:23:48:9f:6c:f8:8d:65:b4:88:a3:7a:0f:55:1c:72:
7d:a2:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:30 2025 by rpki-client