Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: KIdykfiwng4szv2saECxlJa1TsOkCBFC4uGjzvqMGVU=
Subject key identifier: 55:80:BA:2F:DC:0C:8B:A7:B7:77:71:FB:25:B7:D8:4F:E8:1D:EA:76
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 0199FBEBB78EE190ECC130D610D3735B233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: 5YdbMY8lUuMpqUoYtcyb6PobIDlm6Ljqn81Btx6jgrE=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b7:8e:e1:90:ec:c1:30:d6:10:d3:73:5b:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=5580ba2fdc0c8ba7b77771fb25b7d84fe81dea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:c8:be:19:0e:39:37:0a:31:97:2b:13:0e:
0d:d5:64:db:7f:df:93:39:c5:e8:b1:a0:af:93:06:
42:8d:4d:66:1d:04:d1:3a:06:d4:fa:92:e9:d2:f0:
56:7d:0d:6e:9d:5c:65:01:8d:6a:a1:1f:f0:a9:9a:
00:95:d8:8f:75:2f:10:dd:7e:7b:22:66:27:00:e2:
34:ed:24:8d:d4:1c:b0:90:8b:c3:c2:09:70:40:c7:
ce:a8:45:55:54:42:cc:80:89:7e:74:fa:50:94:92:
5b:1d:b1:18:4b:ae:72:65:dc:85:6b:3e:68:ae:de:
e2:a3:3a:32:a8:68:81:c7:f6:c4:f6:c2:8b:2e:7b:
e1:95:01:52:23:99:f4:b6:27:35:41:75:51:6a:9d:
8f:db:c1:9c:a8:70:c2:fc:94:53:9f:9e:82:65:3d:
85:33:0f:71:cd:e2:47:65:7a:13:c2:b0:bd:24:0a:
ba:a4:ad:2e:a1:a0:f7:a5:d9:b4:f8:8f:3b:cb:86:
fb:37:e9:c2:4c:a3:37:3f:5d:4f:2f:e9:44:e1:87:
05:9f:42:6c:28:08:fe:61:94:aa:4f:68:80:4c:4c:
28:81:2f:27:dd:b0:f2:6a:4d:3d:c4:c1:c8:04:15:
a2:95:35:db:b4:60:74:64:81:54:bf:69:30:ce:03:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:80:BA:2F:DC:0C:8B:A7:B7:77:71:FB:25:B7:D8:4F:E8:1D:EA:76
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:84:cc:d2:dd:c4:20:7a:eb:df:e1:b3:b1:ca:6f:b2:90:
4f:d8:15:50:b7:c5:0c:83:7a:9e:a9:16:42:a0:9e:9c:22:bb:
4f:61:96:84:6c:4e:22:76:16:0d:d9:0f:5d:ba:88:61:85:12:
dc:ae:77:20:b4:06:8c:37:05:87:c0:b1:6a:9d:50:51:03:2d:
41:30:bd:11:f6:0a:f7:37:c7:7b:a5:0a:ab:5a:4e:77:a6:19:
d0:df:2e:50:13:29:cf:99:78:1d:4f:fd:82:0b:c6:e2:42:cb:
90:14:4f:d0:02:ce:8d:49:c6:b1:f6:1d:21:ae:c0:c1:f5:4c:
f3:94:87:8d:4c:08:33:c5:e5:74:38:ad:5c:ac:fe:cf:8e:5b:
4b:d8:0f:00:35:c2:70:c4:4b:d4:63:74:ba:30:5d:03:49:ff:
78:36:97:8d:be:a3:3f:8c:b5:1e:74:fa:6a:db:61:35:a6:8b:
31:e5:4c:9e:7b:8c:7f:3a:de:6c:ed:b3:47:18:9e:70:c9:48:
e4:24:b1:42:9a:cc:8a:78:25:2b:af:82:7e:47:06:77:65:5b:
1f:93:21:04:b7:45:5c:49:e5:80:f7:e3:6d:10:1c:3a:39:bd:
83:a8:b1:af:48:78:1e:c1:47:92:ad:02:b6:2c:ec:3d:34:fe:
1b:d6:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:22 2025 by rpki-client