Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: R4m2RdoEhjocKPKa2uehR9gpVtxd9JzGOxcwUq2SmCw=
Subject key identifier: E9:FB:D4:01:90:34:09:5F:E8:16:E1:77:46:C5:2E:85:A4:27:E7:DD
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019A4EF4FC27D99FDE4377FF1F27D0A0FB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0A32
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 50wEKhXP7FnNNmavAZc+0i5XOz3Ut1NXvhVmTXObB08=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fc:27:d9:9f:de:43:77:ff:1f:27:d0:a0:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=e9fbd4019034095fe816e17746c52e85a427e7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:7a:38:df:24:b7:ac:ac:c8:6a:6a:3d:c2:
61:9b:af:34:6b:ff:63:da:9d:d9:eb:a0:46:a6:17:
e5:23:0f:6b:8e:69:5e:ba:be:ef:cd:dc:eb:5e:e3:
e7:ae:c5:30:1d:c3:a1:4c:2d:a4:f6:0a:00:a4:21:
df:6c:9b:87:2b:75:38:99:62:15:5c:fa:5e:d9:6a:
d4:3a:bc:42:b0:7e:ee:48:3c:f2:46:5f:11:1a:57:
61:ff:e0:95:65:0e:e1:3c:c3:21:ae:8c:19:ee:91:
7d:af:11:79:39:a7:04:26:e9:01:a4:5a:03:76:65:
fc:a7:00:31:83:0f:1f:f9:af:51:7f:61:b9:67:01:
a4:a1:3e:ea:bc:df:5d:dd:15:51:94:9f:82:c8:6a:
c1:0c:39:60:25:bd:aa:fc:c5:72:b2:8f:0d:46:ed:
cd:94:58:9e:ba:29:99:ef:c5:12:4b:24:47:8d:96:
82:4c:1c:7c:43:f6:26:28:bd:a9:be:2f:db:c5:c0:
62:cf:28:2d:60:45:c6:85:d8:0c:f4:18:48:74:c3:
b5:1c:ba:44:e6:6a:45:a8:e9:b3:75:81:35:62:85:
9c:c6:60:24:12:ff:a8:51:8e:cf:ce:06:61:a8:be:
2a:09:68:9e:83:07:95:34:ad:b6:b1:59:4b:29:68:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:D4:01:90:34:09:5F:E8:16:E1:77:46:C5:2E:85:A4:27:E7:DD
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e9:45:4e:f5:0e:b9:82:be:7d:49:dc:ca:e4:bd:da:c7:ed:
c6:87:96:7f:83:30:f1:e4:0e:0a:2a:6b:1e:b9:6b:e9:56:a4:
2c:9a:d5:3e:d8:13:5d:6a:b4:a7:08:cb:30:cb:af:f1:13:9d:
aa:45:99:74:c0:a3:8a:33:89:84:d6:c5:f7:78:3b:41:b8:5e:
a0:2d:02:79:44:81:d2:49:2e:4d:f6:3e:a3:f4:3c:06:37:34:
90:cc:94:ff:e7:5e:8d:7a:b6:aa:04:e0:02:eb:58:30:fb:61:
6e:d6:26:66:4f:40:13:f5:ff:97:cd:42:a3:b6:2c:8a:54:0e:
8f:19:8f:f1:99:b8:8c:e2:3f:bc:a5:08:f6:94:07:ec:5b:70:
14:1f:00:f0:87:1c:09:4e:48:3f:e3:31:57:ff:46:02:e3:57:
e2:59:ef:89:a0:5d:8d:df:6e:aa:0e:79:3a:0e:bc:8b:17:0c:
28:94:5a:e4:2f:2f:6a:99:9a:95:bc:02:17:77:f8:7b:e1:60:
81:2b:4e:de:23:30:ec:4d:9a:e8:fb:e3:92:ef:fb:2e:e3:4b:
a9:a0:76:51:27:38:99:6a:d1:07:30:01:e9:15:f5:42:8a:bd:
0b:b2:b6:73:49:dd:d0:86:bc:b1:10:4f:ea:ed:dd:d3:65:25:
9e:e1:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:50 2025 by rpki-client