Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: 7w2BRbV/U+25yjAxTrbcWSxDffMVBx0UQ2t1j1XjxIg=
Subject key identifier: 74:C8:4D:18:F2:9D:61:24:39:1F:F8:48:3C:8F:6D:8E:1B:8A:ED:09
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 019A4D3CD73DAC31D6A7B46425F0B7A0231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 0FD1
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: yAmgC8nvvTEeWuoJYK8AL8EscV63CcKEpBZuJVQhluU=)
2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=)
3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d7:3d:ac:31:d6:a7:b4:64:25:f0:b7:a0:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=74c84d18f29d6124391ff8483c8f6d8e1b8aed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:ec:5a:eb:b1:5b:50:13:7f:d4:84:6c:86:
d7:ba:9a:a1:95:e8:4a:9f:10:60:2a:38:d0:ec:3a:
9b:6c:87:49:48:37:8a:e3:f4:25:39:a4:8b:d5:d6:
ce:a6:28:c6:c3:b9:3b:84:2d:6d:67:fe:58:48:72:
5d:a8:83:b3:0e:79:a1:a5:2b:53:e8:25:d9:6c:79:
0a:96:51:d1:d0:c9:f3:64:87:37:b3:71:3c:38:50:
b4:e1:85:58:15:2e:20:9c:6a:34:f3:78:fc:eb:f4:
31:4e:27:f6:a4:27:5e:ea:d9:c5:a3:6d:f7:74:9e:
e0:47:e9:9a:76:43:1a:a7:24:d6:55:ba:2b:d9:36:
9c:47:bc:e1:5a:4e:2b:a8:98:68:56:d9:2d:72:ad:
2b:fa:c9:ab:a5:1a:4b:c0:d8:14:d7:8b:af:2f:d8:
f6:c2:91:18:9e:00:d7:0e:c5:fb:b9:0a:13:09:20:
06:75:6a:ec:d2:ff:a6:dc:8a:13:28:c7:5a:44:d3:
70:e4:2a:a0:15:1d:9e:b1:d6:ec:59:19:c7:d6:30:
72:04:a1:7c:5b:da:c7:2b:cc:53:0b:06:2d:5a:a9:
9f:8b:9c:a6:ad:39:af:57:b0:48:f9:07:22:2a:c3:
c8:da:77:c9:32:b7:ff:6f:6f:e7:d9:27:d5:83:ab:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:4D:18:F2:9D:61:24:39:1F:F8:48:3C:8F:6D:8E:1B:8A:ED:09
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:eb:4a:1f:32:ca:01:c1:f8:27:6d:c2:10:3a:a2:38:89:
a0:f9:01:34:08:f7:87:ff:85:f7:11:83:4b:7e:ce:68:35:0c:
32:06:c8:30:3b:35:6e:cd:fb:0d:4c:b6:26:38:76:dd:c3:8a:
0a:f9:de:42:cc:25:49:a9:22:8a:5c:d2:67:80:1a:fb:d2:a7:
75:5b:24:49:25:23:34:47:54:db:53:d8:e4:8b:70:a3:f3:71:
31:9a:14:7a:60:0a:20:fe:8a:69:b9:dd:89:71:9c:bb:f5:72:
61:1e:8b:78:cc:a9:1b:b4:e5:83:0d:2a:3e:68:f0:e5:a8:95:
6c:ec:3d:32:7b:01:78:20:71:9e:db:b7:df:8a:73:32:46:2d:
b8:ae:c3:d8:02:d8:3d:04:5b:e8:c1:e6:f7:20:df:83:57:99:
25:3e:96:cc:ea:50:11:08:7d:b7:cb:43:76:48:09:bb:cd:f0:
59:8d:45:81:e8:5e:99:10:67:c1:1e:cb:79:b9:73:f3:e6:6e:
5b:1a:b1:f6:94:c0:94:b4:6b:9b:f0:b4:3c:67:11:fe:0f:e8:
24:9f:7f:a7:e2:b6:22:fc:bd:1e:45:24:a9:f1:48:00:3b:b9:
5f:dd:1f:71:4a:0b:75:9b:a8:74:54:11:fc:b2:77:7a:56:0d:
e4:ab:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:34 2025 by rpki-client