Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: OO0oVsoTT++svYItYbUswoU30DPuaQiYcwcJnGsS+L8=
Subject key identifier: DB:8B:46:E0:21:BD:2F:8E:17:E2:4C:F8:C9:08:F6:B6:8D:6A:E1:22
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019A52D1D1167232590E57C81D93E2F4E513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 07:01:13 +0000
Manifest this update: Wed 05 Nov 2025 07:01:13 +0000
Manifest next update: Thu 06 Nov 2025 07:01:13 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: GfzQFu4Gl1E4gwdPf1AJnt5JHvTpC1ONfiAhKlT4UEg=)
2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d1:16:72:32:59:0e:57:c8:1d:93:e2:f4:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Nov 5 07:01:13 2025 GMT
Not After : Nov 6 07:01:13 2025 GMT
Subject: CN=db8b46e021bd2f8e17e24cf8c908f6b68d6ae122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:fc:cb:3d:d5:88:02:28:66:4a:90:0b:b5:
0a:0b:48:ad:39:63:4a:b6:99:79:9a:0c:81:18:1c:
ba:37:e8:d0:9c:97:ba:09:9f:8d:9c:e3:d4:f6:11:
92:87:99:fc:be:8a:4b:60:22:82:54:8b:16:28:f0:
37:7f:5f:f1:a1:64:d6:bf:f7:e5:71:bf:7c:34:c4:
d4:9e:78:c5:9b:21:0c:ce:e4:4e:b8:41:e8:32:e5:
cd:10:21:aa:d3:d3:68:d4:e9:2b:ad:93:e3:99:fa:
1d:5e:68:1d:25:5d:ae:eb:95:7e:1d:40:ab:86:73:
38:e9:77:a3:18:f9:f3:9d:b2:5c:ac:55:f1:b3:ea:
95:5e:d9:7e:fa:90:58:a5:0b:7b:e7:43:5e:54:96:
0b:3d:ee:13:d4:c2:14:a0:54:29:be:41:10:9c:d9:
d1:9c:e9:09:c2:ce:bb:dc:21:49:3b:b3:2a:39:4c:
a2:51:e6:45:90:59:1b:c7:75:98:c9:f9:51:21:27:
61:0b:a9:d7:0c:71:53:30:93:2e:72:4e:63:38:d0:
eb:8f:76:db:49:ba:13:13:74:2f:79:6e:93:ed:28:
9f:e0:33:d3:d9:3f:97:3f:3a:1a:05:4e:8e:a8:07:
e3:13:f6:d1:48:3f:8c:27:9c:8c:19:db:c4:38:6a:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:46:E0:21:BD:2F:8E:17:E2:4C:F8:C9:08:F6:B6:8D:6A:E1:22
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8f:dc:b5:e7:5d:5a:16:80:7e:d3:94:f9:e1:02:fb:b9:d2:
21:67:2b:3a:a0:1e:24:9d:e5:c1:6b:ba:4d:00:1c:db:80:24:
7f:d8:ae:82:fe:f3:b7:c9:a3:68:80:7d:39:c6:8c:1e:07:c7:
13:02:c8:97:d3:ce:4d:58:db:14:b1:ff:fc:49:25:46:b9:7f:
70:b7:d6:44:f5:88:71:b0:45:a9:6b:de:28:b8:19:aa:ea:08:
5c:5a:b6:8b:f1:0c:07:92:ce:70:85:18:09:65:98:64:55:4b:
1d:73:cc:e7:25:54:c8:97:4f:d6:c6:20:99:a4:89:55:aa:c2:
5a:99:9e:a1:94:f9:f7:eb:0e:a0:b7:06:cc:4a:6f:41:e2:d6:
eb:62:6f:73:5a:52:f8:82:62:35:33:a5:21:d4:f1:e8:9a:da:
4d:0d:d1:37:4e:63:03:92:2c:56:da:d9:0b:fd:45:e3:64:88:
b0:d3:a7:ff:82:ed:8c:f0:6b:62:fe:71:9e:e3:0f:3d:ef:f5:
89:79:01:f9:5f:a6:50:ea:79:96:bc:08:8f:16:d6:36:ef:84:
d6:f4:ef:a4:8c:3c:d4:73:58:f7:98:d0:bd:57:4b:eb:83:9b:
9d:db:5f:23:93:41:b0:02:62:65:40:d3:ef:f8:19:13:4d:7f:
59:71:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:35 2025 by rpki-client