Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: IyqRXms4fizM2yiZor7ZhQ8LI+WTJTfHJqO5gWKWp2E=
Subject key identifier: C0:30:D0:66:96:F4:57:8C:02:37:AB:14:75:7D:E1:02:56:35:FE:B5
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 019A4CCEBD3FD11EA367665ADE861CA679B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 0410
Signing time: Tue 04 Nov 2025 03:00:08 +0000
Manifest this update: Tue 04 Nov 2025 03:00:08 +0000
Manifest next update: Wed 05 Nov 2025 03:00:08 +0000
Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=)
2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: HoLobsh6cqc4ALz+8g7gUXnerQ/LqXH7p6m2ynHO0tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:bd:3f:d1:1e:a3:67:66:5a:de:86:1c:a6:79:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Nov 4 03:00:08 2025 GMT
Not After : Nov 5 03:00:08 2025 GMT
Subject: CN=c030d06696f4578c0237ab14757de1025635feb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:b4:7b:e9:20:30:bd:c9:c5:6a:81:c1:f3:
ae:4a:6a:34:48:c0:46:4a:fb:26:74:dc:f5:51:f3:
b0:95:f7:a6:1e:47:91:b2:f6:2f:48:bb:f9:0c:e7:
5f:3f:ea:f2:7e:a9:b7:62:df:42:61:f3:a9:d2:e7:
eb:5a:eb:8d:4d:7e:48:25:a0:e9:44:45:74:4d:08:
0d:08:a9:05:65:c7:d8:42:75:46:16:3f:3e:fd:4f:
49:de:1f:5c:4f:61:5c:65:f0:a9:d7:70:7d:88:55:
51:aa:20:e6:45:03:a0:36:c8:34:05:9c:3c:06:4e:
64:37:81:11:90:1a:17:e8:ad:cb:6f:df:a5:d3:1d:
76:d0:db:b7:34:10:42:ca:4c:5d:b3:01:48:aa:9d:
f6:e4:ff:40:81:e3:ce:f7:10:63:1c:0a:8d:f2:a9:
73:39:75:2d:a7:c3:90:1a:b4:85:37:7e:80:fc:0e:
15:f9:ed:fc:5f:12:ac:1c:66:96:25:29:4f:62:9e:
cb:f8:e4:b4:59:c0:bf:87:e9:bc:b6:a0:10:34:5a:
29:82:1c:66:0c:37:1c:af:ec:f4:1c:bf:f0:3b:61:
1c:f5:06:87:6a:d5:b8:64:77:85:c3:d1:bc:88:d5:
b9:45:a1:e0:f6:5f:d8:fc:09:a7:0e:eb:be:29:2e:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:30:D0:66:96:F4:57:8C:02:37:AB:14:75:7D:E1:02:56:35:FE:B5
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:fd:8c:7a:7f:2b:b4:1a:9e:29:d7:55:7c:1d:68:d9:d8:
03:20:56:37:59:48:30:4b:89:27:fe:98:39:66:b6:82:52:7e:
ac:06:e4:1b:ef:65:f6:93:0a:1e:79:64:43:92:36:c5:12:1b:
0f:0a:14:bb:d2:e7:73:02:dc:5c:44:e6:d8:1b:77:fd:fe:fc:
aa:05:37:9c:49:21:61:f1:64:bd:8b:4d:12:2f:cb:ee:26:ec:
72:18:05:c7:f5:76:ff:b0:f9:8f:c6:44:27:1d:94:15:b2:a9:
7f:5c:6d:ef:e9:6e:f7:3c:4a:81:e8:b2:30:b4:bd:f3:48:d5:
3e:fd:12:4d:95:ea:8c:fc:7d:f9:93:b4:22:68:a9:05:58:43:
4a:69:f8:4e:b2:46:6e:a5:55:50:82:01:68:a7:61:d1:4a:7a:
4d:17:3a:ce:64:cc:50:a6:70:e1:0b:5b:7f:96:18:bf:56:64:
24:ad:80:e6:89:0f:ba:53:07:61:fd:e3:e6:44:1c:b8:3a:f0:
b4:82:14:ed:29:e0:7f:39:fc:04:16:97:70:91:96:a0:e6:d4:
da:c0:7a:09:3a:aa:64:41:6f:ef:63:98:e7:f9:f2:77:05:b6:
7a:6c:fb:6e:e4:df:da:e2:11:ed:3f:f1:1e:87:18:c4:e2:6b:
66:22:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:38 2025 by rpki-client