Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: +edyY/sxSG3aUw7k8tStUcH9qLY5aZmzRH2a0kQtduk=
Subject key identifier: F1:D4:E5:28:6C:36:65:4B:20:82:15:9B:E7:2F:E8:CE:F7:96:AE:64
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019A4DE1768FAB75D6B3699C5FB458112DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 04EB
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: ivqUOO8fMzRdnwyoEJSpbp3kwiwIsbxdraEqqi8SO+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:76:8f:ab:75:d6:b3:69:9c:5f:b4:58:11:2d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=f1d4e5286c36654b2082159be72fe8cef796ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:d6:4d:56:d2:86:1f:7b:76:7c:db:ac:44:
9e:76:ff:0b:1b:20:37:e0:c1:28:00:38:b9:05:ec:
af:73:c8:96:c6:b3:69:5e:ac:c7:a3:0e:67:d7:a2:
95:f8:b9:79:30:c0:9e:f0:7b:49:a5:21:e4:f2:3a:
6c:7e:ae:f9:5d:7c:ff:7a:3b:e9:42:63:1b:b3:6f:
69:74:02:38:77:72:38:e8:4d:19:c7:88:73:da:72:
24:ba:b7:92:bf:ef:08:b3:f5:1f:ec:ad:ff:34:96:
f6:48:4d:e0:46:3a:17:ed:56:8a:18:a1:78:2a:39:
10:8a:53:30:94:56:a5:53:c4:fe:af:51:66:64:4b:
3a:14:d2:23:18:e2:57:8e:9e:e0:ef:76:a7:64:f8:
94:92:67:22:96:d8:b9:84:49:fe:36:2d:5b:47:6c:
c3:70:dd:4b:f8:ed:96:db:9d:a4:9b:3f:69:4a:d1:
c3:6a:bc:46:ee:1f:2c:80:6b:6b:b6:d1:4a:fa:fb:
de:b5:51:7f:e1:74:d0:98:94:4e:af:cd:31:06:0f:
af:4b:4e:20:e3:6e:cb:7b:12:35:1f:52:1f:83:4c:
b8:0e:9a:e0:fc:cb:84:f2:22:32:a0:c5:fd:e4:f2:
a4:4c:94:e2:48:99:df:22:72:9b:31:89:70:2a:b3:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:E5:28:6C:36:65:4B:20:82:15:9B:E7:2F:E8:CE:F7:96:AE:64
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:28:d1:07:20:e7:e5:36:37:27:61:a5:be:22:fb:1b:39:2e:
5e:c1:99:f4:08:c7:1e:82:24:5e:8b:66:b3:b7:1b:68:2a:1f:
7f:1b:99:13:71:0e:fe:d8:20:5d:c1:fb:5c:23:56:dd:fd:f4:
30:a6:ac:29:ab:bd:ea:37:0b:72:9a:18:83:1d:ee:ba:72:39:
4c:99:45:40:1f:38:b5:a7:ba:67:df:12:1c:f5:08:a8:3b:8e:
3d:99:c0:42:a0:a6:b5:e9:2d:9f:6e:4f:d5:4f:c7:3f:37:e6:
19:c3:2e:53:4b:0c:88:95:53:4b:74:9c:60:7a:96:ce:85:5c:
bb:bc:03:2a:21:df:79:9a:f6:0b:9b:12:f8:69:c9:e2:db:97:
5a:c5:05:7c:26:61:e7:d4:0c:f0:6a:ce:56:53:44:28:28:d1:
78:1b:e8:6a:29:f9:ac:48:9e:1a:9d:aa:94:26:fb:0f:2b:d6:
2e:ae:23:a0:d2:99:c5:c2:16:26:fa:76:2f:2f:e7:de:a2:f3:
73:cc:3a:41:41:7a:0e:7a:c3:84:a5:14:ef:69:ba:fd:52:e9:
ec:97:45:1b:6d:69:e4:81:97:dc:c6:e1:dc:1d:73:62:85:7a:
98:16:1b:c8:36:8f:b7:ab:aa:9e:3e:cf:7e:e9:57:e3:f5:91:
1d:90:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:19 2025 by rpki-client