Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: 3ygHefNlZxKaL1fy+QZzhim3ewpTEDGHkk8CIDZNW4o=
Subject key identifier: 57:54:A8:63:94:EB:87:7B:19:A5:53:D3:32:E1:55:94:74:DA:33:32
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019A530855FB220F068F1B73141AA0D3EAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 1025
Signing time: Wed 05 Nov 2025 08:00:46 +0000
Manifest this update: Wed 05 Nov 2025 08:00:46 +0000
Manifest next update: Thu 06 Nov 2025 08:00:46 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: 4AJ20hhhk4UT7TCmQ16Dj1CEz5tybCtqmHAQwbCfcFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:55:fb:22:0f:06:8f:1b:73:14:1a:a0:d3:ea:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Nov 5 08:00:46 2025 GMT
Not After : Nov 6 08:00:46 2025 GMT
Subject: CN=5754a86394eb877b19a553d332e1559474da3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:3b:1d:b6:85:cf:6e:8c:d5:cc:00:eb:b5:
c3:7f:e4:59:23:3f:ba:db:0d:4d:a8:d5:57:1c:33:
f1:a1:29:6f:b5:07:35:0c:f6:cd:21:de:28:a9:51:
b3:aa:bd:c9:97:e6:3c:5f:94:75:b8:07:c9:4b:d9:
62:4e:0a:b4:3f:09:52:d3:21:83:ed:30:61:73:ec:
46:5a:80:aa:93:6e:0d:8e:d0:e8:34:58:33:97:4d:
f3:90:96:0d:51:ee:5d:36:01:08:8c:ce:57:ff:be:
38:f8:8d:e7:0f:b9:75:15:97:59:1b:e8:37:c9:7c:
56:d0:c9:bb:98:f3:a8:67:6e:71:d0:ff:74:27:bb:
29:8c:1b:3a:01:69:71:10:41:d2:27:44:45:36:2c:
00:b4:11:ce:64:4d:e4:fa:34:6b:fa:d9:7f:f2:85:
e8:c2:ab:68:1a:a5:2c:43:df:bb:15:c5:fb:f5:7d:
ab:80:7d:6f:e6:11:50:bb:f1:59:0a:94:88:c2:56:
95:1c:b6:59:e8:b4:e7:6c:ba:79:2a:54:1d:14:c4:
7e:96:7c:9a:5c:f9:7e:c9:52:7a:d7:38:79:da:4a:
2f:0f:ec:41:f9:b8:89:d7:dd:f7:b8:c3:2b:b1:e0:
0d:7a:3f:0a:7e:39:de:3c:ca:f8:3a:98:bd:f5:4d:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:A8:63:94:EB:87:7B:19:A5:53:D3:32:E1:55:94:74:DA:33:32
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:f7:5a:f9:d3:3c:01:4f:56:65:1e:78:f9:bf:23:ce:fe:
ed:da:53:33:58:24:20:8d:02:61:ce:6e:c9:b3:03:44:df:ae:
61:76:52:7b:0d:4c:b7:7a:66:d0:01:54:f5:2c:ed:62:5f:23:
97:01:f0:8f:ad:aa:b6:8f:cc:3c:9e:9b:05:85:f7:88:dd:e5:
c0:64:e8:10:71:6e:4a:d1:6e:01:6c:f3:90:0d:bc:8c:ce:fc:
c2:36:80:fe:64:1a:42:d7:c5:10:4e:e6:ca:18:bd:e0:d1:8b:
f9:99:09:68:06:6e:e2:4f:0c:9e:f4:6c:cf:b9:c2:80:90:dc:
d0:66:c2:73:82:81:b0:2f:50:81:c0:27:81:43:b4:a5:53:3d:
d1:09:b3:a1:e1:44:ee:6a:d8:c0:08:a3:bb:ed:8b:f7:98:bf:
3a:17:48:54:5d:dd:04:59:19:d2:a0:3f:43:8b:9d:42:33:03:
09:7d:0f:a1:3c:7c:4f:a0:c4:dd:65:92:a3:3d:15:8a:36:25:
a1:f7:d6:91:ab:66:89:8f:81:77:28:a4:ca:55:1b:a9:f7:2d:
4c:dc:eb:f9:b6:d5:ca:d4:c8:6a:18:05:f2:8a:e6:2c:09:ac:
2b:e0:77:40:d8:4d:6f:55:da:fd:ba:4c:4a:aa:3f:b8:b5:a4:
f9:05:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:28 2025 by rpki-client