Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: Uob0Ue3zF5q/nBkkBADTqWsDmDVGZEswN+r3WgC3w5E=
Subject key identifier: 67:40:04:3D:5B:4A:E4:87:2F:B2:92:73:60:A7:C8:7C:95:1F:8A:A1
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019A4F6271B66FB95A76F9C52B9AD0E3F2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 16F7
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: CfVOq1dzs+fZLo2pweznwgIAkHMPJxwL25FoStkJBTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:71:b6:6f:b9:5a:76:f9:c5:2b:9a:d0:e3:f2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=6740043d5b4ae4872fb2927360a7c87c951f8aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:e3:00:70:dd:02:4e:0e:74:47:4e:d1:b4:
f8:79:1f:2e:61:db:3f:bd:c0:4c:c0:7d:52:10:f1:
bc:63:46:c6:c3:f4:51:9a:07:18:12:43:f9:6f:58:
b6:00:72:6b:00:5a:eb:4d:e1:9b:95:40:18:db:99:
6b:d8:25:8f:6d:a8:df:e0:90:b4:ac:7a:26:64:2c:
a0:79:75:06:5d:46:ec:c7:22:55:ed:bf:c4:5b:17:
8b:68:2a:54:65:80:f2:65:b0:7c:42:36:2f:87:31:
c6:9e:ef:3c:58:20:23:b5:f8:a4:ac:d5:b5:ee:0b:
64:b2:93:c8:5c:4c:c4:c7:bb:0f:5f:dd:f9:e8:13:
76:a3:b3:ab:f9:97:a9:be:c5:32:6e:ce:8f:71:e6:
49:11:90:0a:8d:cd:53:e3:03:26:d7:d3:41:a3:8d:
41:d0:3e:84:c8:b9:0a:b5:55:a8:82:d0:27:9b:47:
1c:a5:c1:b7:dd:f5:46:fb:b2:a7:dc:b4:63:20:f6:
be:b6:d5:e5:5f:01:c4:bc:52:d7:e4:84:4d:29:b5:
ff:26:21:63:9a:37:b3:ad:a8:80:4c:b8:40:f2:ca:
b9:6c:37:c8:19:4f:5d:56:e7:fb:80:cc:4d:a8:e0:
96:94:79:16:8d:5c:4f:62:0a:4a:e2:3c:b4:ea:1f:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:04:3D:5B:4A:E4:87:2F:B2:92:73:60:A7:C8:7C:95:1F:8A:A1
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:0b:dd:5d:bf:07:6c:e6:9b:b6:d8:8b:9f:0f:75:93:a5:
4d:1c:8e:65:a3:c6:06:b0:45:c2:ed:e6:98:83:34:5a:7d:18:
b5:63:11:86:6d:16:d9:93:48:07:bd:85:8d:98:a3:a0:46:1b:
78:2e:b7:ee:b1:d0:40:ab:96:6b:a3:33:36:92:c3:e7:a7:04:
4f:28:7b:3c:a0:8c:84:0e:f5:6c:c9:98:42:da:cf:16:b3:0c:
b6:c2:5b:53:bd:92:28:08:39:2c:af:81:32:54:59:8d:ac:46:
fd:c9:e4:f8:8a:be:3d:b1:36:dd:e2:23:57:1d:e4:13:dc:33:
f8:fc:94:c4:22:33:b5:72:4f:88:a9:de:55:ce:9f:a6:2c:65:
b3:7a:9d:db:ed:c8:2a:7f:45:6b:8c:6f:64:74:25:df:1e:ce:
eb:a6:5f:0c:ac:1c:0f:d2:56:fc:a0:c9:9e:57:ec:47:99:36:
bc:8b:49:d9:09:c1:ae:2b:fe:4e:e7:70:23:77:74:58:7a:2f:
26:50:43:ee:16:3b:07:20:92:f0:90:04:5d:09:c0:57:4e:c3:
b6:88:fd:2e:e1:82:d6:74:56:85:0d:5c:65:6d:0b:7b:ca:7f:
a1:65:50:53:e1:31:45:e4:a6:12:4f:f5:f3:df:8b:00:6e:00:
9c:0e:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:46 2025 by rpki-client