Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
File: FR5sPcXWdU_k9gqCscxVGreA34s.mft (raw, json)
Hash identifier: dC4FjPQcRoQTfYjRfxvQsejNs95agf8zYTBwRB41xJk=
Subject key identifier: 79:94:D5:69:9A:E0:FE:2A:8B:65:70:65:88:65:7B:6D:D0:94:71:CB
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Certificate issuer: /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial: 019A4EF50E22B02E472DA6F368F827230694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: FR5sPcXWdU_k9gqCscxVGreA34s.crl (hash: D1Cvg5lb+BWdOioICbOJb6cgXP/3snVbFbaLZ+4fn4U=)
2: H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa (hash: F+upw1/HpLM3WaLlt0Qi9SCbAq0VRTzqm01IyvK059A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0e:22:b0:2e:47:2d:a6:f3:68:f8:27:23:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=7994d5699ae0fe2a8b65706588657b6dd09471cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:3f:fb:2c:ab:c8:93:1b:34:4d:8a:ea:85:
21:42:03:a4:15:bf:05:58:fb:24:e5:89:b6:6d:0b:
e5:9d:cd:7a:38:b9:00:31:65:e9:38:83:8a:cd:9b:
7f:2b:1d:04:79:c3:60:5a:c4:8b:a8:c2:e5:ef:8e:
ed:08:93:13:a9:84:98:3e:d5:6a:70:a5:96:f3:db:
0d:e1:e9:76:66:24:9e:ce:23:62:70:cc:e3:64:c8:
1b:ef:9c:95:ca:a8:79:64:de:3a:6e:0b:a3:51:5a:
b6:c1:e4:60:1f:03:44:67:79:b7:3b:8a:df:07:d6:
05:31:42:ba:83:f6:f5:e1:28:e4:f1:71:cb:6f:e9:
2e:32:52:e8:9f:45:3e:b6:0b:97:2e:72:bd:fa:70:
20:30:3a:c0:36:ec:6d:36:ce:05:ff:1d:5a:e8:4d:
1b:2b:16:29:36:85:37:2d:08:25:5c:cf:a7:34:ff:
20:7c:8e:cb:95:5e:c0:55:c8:53:2f:1d:95:dc:e3:
2a:db:d5:7c:1d:7a:3e:f1:8f:a8:18:eb:c5:d9:62:
10:c6:3c:8d:45:ae:66:64:a3:07:28:f4:d3:5e:d4:
85:73:47:14:9d:19:06:25:bc:71:cc:5c:eb:a7:6f:
9d:7c:3a:ef:c3:c1:84:1e:43:dc:47:41:25:e1:c2:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:D5:69:9A:E0:FE:2A:8B:65:70:65:88:65:7B:6D:D0:94:71:CB
X509v3 Authority Key Identifier:
keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:14:b7:0e:75:38:86:c0:e2:c6:86:45:eb:5b:fe:fc:fe:
0c:c6:52:cb:f1:ec:0b:ec:aa:43:ad:53:d8:bb:0c:10:86:2d:
0b:54:ee:69:d4:f2:47:77:f1:c1:43:c7:9c:2c:79:d4:03:3e:
98:b6:07:0b:1a:5e:9e:16:38:1d:64:0c:b9:09:ec:c3:0f:33:
b8:8b:4e:4f:4a:6f:98:e6:a7:3d:ae:75:82:f1:bf:87:75:08:
ba:f5:0f:d0:b8:8c:2e:88:03:26:79:25:9f:e0:1b:f0:7c:ff:
08:27:48:e2:ef:b6:e0:36:27:cc:ab:f7:ef:f0:c7:f9:30:64:
ec:f9:b1:9c:b3:7a:62:5c:5d:98:aa:16:fa:8f:a1:30:16:e9:
50:6a:4a:9a:af:51:7c:18:18:b7:8b:f4:79:19:fa:6f:4a:c5:
7b:1b:e2:4d:57:4a:c8:8c:5c:55:5d:9f:02:7d:e5:f5:1a:03:
09:69:32:e6:2f:e2:62:9d:fb:59:ea:26:1a:8c:d1:03:d8:02:
73:b9:18:72:fa:73:b8:12:00:0c:40:ea:8f:b3:bd:77:c2:bf:
53:34:0f:2d:71:63:a3:5b:28:bd:91:73:2d:84:b5:83:c8:58:
e3:84:d5:15:25:3c:62:e0:d4:47:90:f3:6b:43:1c:59:89:22:
49:ed:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:53:08 2025 by rpki-client