Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: JQb40KoUYdB+CbQaGXP1/It/jgdJt4LyCd16l/3OIUI=
Subject key identifier: AA:04:64:04:9E:BC:83:51:9A:4D:56:06:A9:82:23:ED:70:77:CA:F2
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019A4F98E249D6FA2EFCBA6DC985CD64E1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 16E5
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: hk6rbDEOKfYezuKin3ItqEjHxmvKJLnM5Std/QVxIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:49:d6:fa:2e:fc:ba:6d:c9:85:cd:64:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=aa0464049ebc83519a4d5606a98223ed7077caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:5d:19:4d:f1:ce:ff:78:2a:ea:d5:9f:ee:
d6:b5:5a:a6:c0:d1:1c:e6:a3:ca:24:09:fa:bd:d9:
86:14:9c:27:24:9b:7e:0f:e8:49:8b:b9:36:ab:02:
e6:c0:56:32:a2:76:a4:d2:d3:db:1a:1f:30:f8:c2:
7e:49:b8:65:1f:7e:1f:a0:94:e1:8f:f7:e4:5c:1b:
4c:1c:c2:d7:b6:2c:20:94:55:ff:47:a5:ee:37:a2:
98:f7:e9:6e:15:fe:3d:59:2b:be:ab:71:ba:51:f9:
e0:e1:2b:7f:1e:d7:13:90:45:e2:86:30:cc:de:ab:
43:f7:2a:e5:f1:9a:57:15:d7:32:bd:61:56:86:e5:
04:73:89:bb:f9:ab:ae:49:77:42:59:70:04:0b:11:
77:69:d4:fe:ba:fb:1a:c6:bb:41:0b:50:aa:9b:ed:
57:19:6c:d1:bf:6f:f0:95:59:2d:5c:b5:f2:4c:8c:
91:19:12:d6:5a:64:be:97:fe:b5:e7:7c:b4:24:47:
e6:61:17:86:77:c9:0c:1e:57:4d:8e:3d:e6:79:66:
62:bd:63:46:b5:37:d4:49:67:e3:fc:bb:64:61:ad:
48:c9:5d:46:6f:3b:20:e8:4b:ab:84:ac:f3:d3:26:
91:24:0c:37:86:6f:f8:c9:f8:bb:6a:4d:b4:d2:7d:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:64:04:9E:BC:83:51:9A:4D:56:06:A9:82:23:ED:70:77:CA:F2
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:42:ae:d3:9c:06:9d:72:2b:15:c9:2f:d6:d6:77:69:25:
b1:0d:f6:75:06:98:af:29:85:d2:66:11:25:8a:0a:86:ad:75:
d6:4a:e2:21:e7:a9:05:68:bd:5c:70:29:d1:41:50:76:b3:b6:
62:61:51:52:00:b6:67:1e:f1:88:f1:3a:2b:2c:63:77:7a:e4:
72:aa:86:d8:13:ba:f4:74:ad:e9:f2:2c:ac:9d:e4:c8:7e:6c:
e9:39:86:82:e1:f2:be:11:db:62:57:94:12:97:4e:9e:2a:30:
33:f8:2f:61:79:a5:93:06:ba:74:3e:75:4d:d1:4e:1f:73:59:
da:5f:ca:78:c0:6d:35:18:8a:7e:0f:44:05:a1:f3:f3:36:79:
70:7b:9f:96:02:81:f9:a2:2c:24:e5:4e:fd:e7:00:e2:23:78:
52:f9:69:a6:1a:75:ef:a8:24:94:07:1d:54:b4:e0:19:b5:92:
ec:42:73:9e:1d:08:c3:17:bf:e6:7a:88:ab:8d:7b:f2:9a:57:
78:23:6b:a8:4b:fe:4a:a9:55:9c:b5:d5:b3:76:df:6e:13:b8:
1e:27:a8:fa:16:ea:4e:80:68:36:2b:79:34:71:af:5d:6a:e6:
2f:93:5f:61:c8:f5:f3:46:10:fc:0d:f7:0f:38:35:c6:6f:fc:
24:b5:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:38 2025 by rpki-client