Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: my0vUr6/wMCn2GvkTW75r1ihUUaZaBHcoxbE9Aafp34=
Subject key identifier: 08:58:7C:50:9A:2D:1A:2C:04:4D:8F:C6:9E:18:3D:0D:B9:59:B6:6C
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019A533FB86DA20E7CE946D4B418BB35961E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 14B3
Signing time: Wed 05 Nov 2025 09:01:16 +0000
Manifest this update: Wed 05 Nov 2025 09:01:16 +0000
Manifest next update: Thu 06 Nov 2025 09:01:16 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: czSvfMCoLd+2yoPkYMllaiaTaYG8LyqAwjNKFTGqDfc=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:b8:6d:a2:0e:7c:e9:46:d4:b4:18:bb:35:96:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Nov 5 09:01:16 2025 GMT
Not After : Nov 6 09:01:16 2025 GMT
Subject: CN=08587c509a2d1a2c044d8fc69e183d0db959b66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:a8:9c:6f:e2:21:67:44:ae:57:9f:1b:72:
c6:6d:63:e6:fb:7f:59:fe:e3:70:50:30:14:66:6a:
51:64:a2:bd:e8:73:44:4f:be:b6:a3:0d:d2:69:7e:
f1:d2:11:48:78:29:19:d5:35:71:46:f2:53:87:7a:
48:0c:eb:e3:25:39:2e:59:56:f6:08:09:ae:23:e3:
8e:19:3d:35:94:c6:81:d9:b4:8a:5b:8c:f0:68:1e:
c2:c2:1a:ab:c2:2f:13:77:9e:b6:e9:bb:cf:6d:25:
39:c4:81:7b:7f:26:e0:6a:5d:5d:8d:53:3a:75:3e:
0e:41:d2:d7:98:9a:52:6f:f7:6d:4a:09:1a:bb:d5:
f3:dc:35:b6:a1:19:8a:9a:ed:64:d3:ff:88:9c:11:
d3:ea:89:2e:9b:ae:3f:34:58:e1:a3:b8:8f:61:c4:
02:86:f4:e5:58:56:4a:9e:5e:f6:5e:64:2b:ca:62:
1f:7a:50:bd:b6:9c:b7:70:1f:8f:fa:8e:17:78:1b:
d5:47:d0:06:9a:13:a1:6a:22:79:80:f0:0f:a6:a1:
2b:32:31:0d:dd:f1:21:1b:3b:56:f4:8d:85:54:12:
cb:af:78:93:5a:52:67:49:98:09:7c:e3:f8:d0:17:
a3:6b:b7:1d:d7:67:7c:c7:5d:de:18:e8:c8:98:3b:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:7C:50:9A:2D:1A:2C:04:4D:8F:C6:9E:18:3D:0D:B9:59:B6:6C
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:cc:46:57:b7:52:05:8e:42:30:59:3d:25:08:20:ae:d3:
3a:f6:ab:03:d6:f3:bc:36:41:2c:b7:b3:7c:03:44:ab:aa:f4:
9b:de:d8:21:15:07:1f:b6:ff:e6:fe:de:81:dd:92:2c:a2:f0:
71:c2:f9:76:2e:fd:a9:98:28:3a:a6:f1:d8:4b:4d:a4:25:d5:
95:5b:70:5e:f6:e7:fe:ea:f0:da:89:2a:d6:c6:1b:91:bc:b2:
4a:a0:79:8c:05:ae:f8:c3:53:9b:1e:01:fc:f8:69:10:78:26:
db:e7:8f:0c:d8:46:42:f7:4c:24:f0:b6:8e:01:e3:e0:8c:0f:
0a:51:8c:94:cf:10:f3:e6:a7:a7:06:c5:06:2f:37:18:e1:c4:
f7:13:02:39:15:83:32:17:49:40:cf:e1:b4:45:35:3d:9f:18:
66:f5:ee:de:76:7e:75:7f:b4:0e:d5:4f:a4:73:80:9e:d4:be:
d3:58:66:64:67:5a:11:65:7c:e2:cf:38:2e:23:58:37:70:c0:
a0:4f:ee:56:35:dd:04:13:d6:40:85:ed:4c:e2:88:2e:82:32:
10:03:b4:a3:5f:af:8a:f1:ef:31:0a:d0:a1:57:60:e4:bd:96:
ac:cb:4f:e7:04:4e:cf:e6:54:87:f1:b7:8e:66:7b:85:0c:a9:
a2:75:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:05 2025 by rpki-client