Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier: c7kf+RDw5wdNAPQ5lR5hcqT1KEbVz9zEUK1GRjot7K8=
Subject key identifier: 11:16:EA:31:A6:85:27:3F:91:FD:2D:20:74:32:B7:32:9C:BA:63:83
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 019A4EF45A707A4C3A5B34ED3F7419B0A7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=)
2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: RSDmlrZul69RuEkQEYEF+rH3XRmYHJmxm+x83v5tw64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5a:70:7a:4c:3a:5b:34:ed:3f:74:19:b0:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=1116ea31a685273f91fd2d207432b7329cba6383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:2e:45:7e:05:5d:26:ab:b4:0c:fc:e6:42:
17:48:7b:cc:72:ac:00:f6:7f:63:80:38:2b:82:34:
0f:ac:95:da:1e:84:60:16:2d:a3:9c:50:b1:98:19:
9f:99:7f:6b:48:75:76:bf:76:15:e0:d9:bf:8c:26:
cb:7e:68:51:a1:9a:20:d6:8c:86:a3:c2:d1:c2:03:
af:3f:4f:bc:08:82:f3:34:d4:18:e4:97:8b:ae:17:
37:75:61:09:c4:6e:4e:6b:91:55:83:de:5f:26:45:
05:99:cb:36:f9:3e:fa:db:e6:dd:6a:41:cd:ec:00:
76:07:de:39:03:14:61:35:75:af:6b:09:d5:ac:df:
b4:78:01:0e:bc:48:d4:9d:fe:62:e8:77:0d:f4:6f:
5e:be:31:2f:fe:bb:45:06:9b:6a:1c:eb:53:6b:07:
7d:03:cf:e0:bc:fe:a4:9f:b9:17:6c:0d:b8:de:f0:
d8:75:13:12:18:0f:44:da:55:ed:45:f2:0e:39:de:
03:49:65:08:7f:da:dc:44:bf:b4:37:23:0d:c8:ca:
3c:ec:25:04:9b:d9:d3:bb:5f:0d:01:38:f1:fc:78:
6d:bb:5f:ce:53:07:b4:fc:ae:f1:e3:5c:de:d9:b9:
1f:c2:68:2c:e0:06:19:15:76:2b:f4:94:e0:74:f4:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:EA:31:A6:85:27:3F:91:FD:2D:20:74:32:B7:32:9C:BA:63:83
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dd:2e:ea:00:63:a7:80:cf:56:f1:35:05:27:f5:d8:d9:d7:
37:3b:2b:d1:12:39:b4:df:5c:31:8f:5b:27:f5:1f:9f:02:45:
5b:f5:ed:d1:6c:1a:e9:8e:67:87:a2:3a:53:3e:89:c1:6f:5b:
c3:05:b7:f2:c3:83:dc:93:4b:94:37:3e:38:2d:eb:8c:e5:75:
b2:95:65:5b:c9:0b:d7:1a:d1:18:16:40:b6:e6:9f:58:c0:5b:
ae:40:83:65:d1:e9:11:87:a8:3c:34:16:98:4c:74:4e:57:d7:
bd:56:24:12:9f:97:17:bb:04:b1:34:16:ae:38:af:ba:d6:e1:
a1:07:ea:4c:61:9b:6b:a8:11:32:25:1a:87:19:e5:c5:ec:d7:
5a:60:8e:5e:ec:59:1d:27:05:39:93:68:f9:71:dc:cb:2f:8f:
51:c9:fe:d9:c1:7b:e7:16:99:7e:e3:aa:bf:ee:ce:f2:80:7f:
d6:04:03:1a:1f:bb:74:3c:81:84:e3:32:1a:db:c2:4a:ab:77:
46:46:19:c3:22:42:e6:02:c2:80:87:29:a1:a8:86:75:f1:7c:
35:80:f7:ec:0b:07:53:f4:46:51:f1:2a:80:f9:31:bb:59:41:
1e:cb:b1:5a:a0:ec:9a:b3:1f:75:ba:9a:8f:6d:50:74:b2:16:
2c:6c:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:19 2025 by rpki-client