Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: S0KNV5uCxl+IbWxVTjn2DuX2ODPLowJem1URR+3f5pk=
Subject key identifier: A5:A7:2B:7C:19:22:70:79:90:E5:10:CE:72:1D:3C:29:63:B1:F9:47
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 0199FDA1BE5A855FCF79BE5E96A4674A9581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 03EA
Signing time: Sun 19 Oct 2025 18:00:59 +0000
Manifest this update: Sun 19 Oct 2025 18:00:59 +0000
Manifest next update: Mon 20 Oct 2025 18:00:59 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: PBalo0WBh0sIQwS71no0vLldDe6zW9YzxoD492fGIdU=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:be:5a:85:5f:cf:79:be:5e:96:a4:67:4a:95:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Oct 19 18:00:59 2025 GMT
Not After : Oct 20 18:00:59 2025 GMT
Subject: CN=a5a72b7c1922707990e510ce721d3c2963b1f947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:ba:49:44:26:40:3a:1b:ef:40:57:01:e5:
13:53:dc:ce:05:29:7f:9d:b0:a9:b1:e2:82:dc:24:
7a:de:58:ef:af:8c:d5:c0:e7:8c:80:05:c9:8b:6f:
b0:48:25:76:88:f6:12:1a:f8:5b:7a:c1:eb:3d:0e:
4b:48:97:9e:0a:70:54:27:a9:dd:53:6f:1a:13:78:
42:85:b1:0b:f6:24:5d:89:ed:cb:4f:6a:b7:c7:e7:
0f:6b:f2:ef:56:9c:eb:bd:bd:2d:f1:16:58:a6:68:
3f:13:88:ef:6d:81:09:68:87:6a:02:89:3b:a7:ac:
54:a6:3b:9d:28:c6:f3:5b:dc:6d:54:6a:c0:46:02:
ac:ae:63:1f:44:0c:0d:84:52:0d:45:16:6e:e1:8f:
3a:a5:19:bd:f9:6d:92:b9:ae:8f:b4:e8:fa:a2:f7:
49:e5:f1:76:cb:46:b1:3c:02:44:c6:f6:89:44:94:
b9:32:68:fd:c7:be:79:08:e2:8a:5a:4d:3b:5d:1d:
d1:47:f1:42:ec:ec:a9:89:e0:4a:22:53:71:93:40:
e6:24:04:70:8b:a7:80:07:2e:d8:cc:df:5e:32:88:
36:be:49:04:01:4f:bd:75:b4:02:b2:51:51:4f:dc:
6c:5e:1a:f8:07:cd:c3:0d:5b:f3:90:ed:93:a6:f2:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:2B:7C:19:22:70:79:90:E5:10:CE:72:1D:3C:29:63:B1:F9:47
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:1f:e2:da:b9:f3:cf:55:92:f6:b3:ab:26:47:d2:a3:1e:
fc:a7:b7:8d:d2:d6:c7:50:fe:88:41:22:76:f7:f2:33:ef:ff:
bb:41:68:cf:a0:12:b5:99:56:ec:2e:ad:3a:93:c5:18:ec:77:
8c:a0:f5:c5:ea:c6:88:1c:1d:05:bd:b1:5d:ad:6c:a7:cb:1e:
fc:ce:e7:ee:21:aa:a8:3a:d4:83:9f:6f:24:2c:f2:bf:8a:81:
74:4b:b6:63:4c:6a:ad:8a:29:2d:5e:fb:b5:da:e2:00:34:d8:
00:42:9c:15:07:9b:ca:9f:06:e3:37:11:cf:b2:01:cf:98:85:
fe:c1:a3:7d:c3:40:41:63:f6:86:bf:8f:cf:06:88:c4:03:da:
2e:45:98:72:f7:e8:ee:2c:2a:28:d0:8f:c0:47:d1:38:8f:1c:
e5:3d:3d:7e:36:90:42:cb:97:6d:33:0e:fd:04:24:12:66:10:
33:7c:cb:3c:bb:41:b0:dc:7b:84:44:e5:67:fd:a5:24:d4:de:
8d:31:93:13:99:af:86:5f:9d:bc:94:70:a1:a9:13:86:d1:65:
fd:99:96:99:69:82:1a:5f:d2:1e:c0:af:b2:ce:71:aa:80:bd:
cf:73:40:08:93:61:d8:52:19:da:02:67:2e:41:c8:c1:60:bf:
12:30:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:08 2025 by rpki-client