Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
File: FShvAiXBQdlYV_50ZGlJ513Zbyg.mft (raw, json)
Hash identifier: ziPBdEHeFqYXkiwhv4Gtn7V7f0w6dC/lwAcdB1JIhfs=
Subject key identifier: 59:B0:7C:DB:25:ED:22:58:FF:CC:F7:F0:7A:E8:AA:A2:F6:A6:05:F0
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Certificate issuer: /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial: 019A4FCFE09CEB9DD37DCF9E6C384536269E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: BmXBWLA9_6SuRnMhbs95EZUkezI.roa (hash: 1Lg3r/teD74lzp5Bd3F8aEAT8tvLCJF4h8NvTRLICRE=)
2: DqL2Iz-nfiZFz9O_JLFZ1u0upXo.roa (hash: IluKRrKBF5sjHfDOuWCJtjWy7NTUF/LiNuEDUpQYIec=)
3: FShvAiXBQdlYV_50ZGlJ513Zbyg.crl (hash: gjydUCn77Yxl6NrnER7jDvnVUxUoFPv5RpNsclQXxgQ=)
4: Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa (hash: 5Ujre3KMVIzM/Fx6KHgseWX+SO9fZ/nChf3q7rvn980=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e0:9c:eb:9d:d3:7d:cf:9e:6c:38:45:36:26:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=59b07cdb25ed2258ffccf7f07ae8aaa2f6a605f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:10:76:50:c3:75:3f:54:3b:0d:3c:1e:ac:
88:95:e2:2d:2f:da:3d:1a:82:6b:a7:2a:35:30:a8:
fc:28:07:3a:10:cf:97:a1:8c:ce:1c:a0:84:c6:12:
af:c9:2d:a4:ab:3f:0d:04:26:9a:31:8d:48:a1:6d:
9c:48:d0:1d:9c:a6:93:2b:91:22:77:88:76:a5:3c:
fd:5d:f6:13:16:c5:d1:75:6f:fd:1f:9a:40:3d:c1:
01:9b:e4:8c:19:63:ea:86:ea:cb:51:8d:4d:18:10:
da:3b:df:b3:8d:e8:c1:90:87:fe:52:04:3b:df:6d:
cb:42:d2:df:a2:55:ff:53:7b:9e:03:cf:a1:d5:11:
c0:75:d0:49:ad:a9:1c:27:8f:53:d5:6f:04:b6:4a:
60:1c:ec:be:95:04:61:98:98:34:49:1e:80:c4:c7:
40:19:50:6a:41:d1:6b:fd:c5:bc:78:6c:6e:e0:57:
ea:f1:5f:f7:48:f8:04:85:c0:b6:ea:dc:5f:65:0c:
d7:ed:4e:77:af:f1:89:a6:f1:15:1a:37:b7:8b:5a:
dc:6a:ad:b3:5f:9a:92:3d:a5:f0:01:a8:71:62:ce:
af:a4:c8:0a:ca:81:b3:92:79:10:68:35:bc:71:0a:
58:83:61:4a:22:3c:a9:38:2f:ed:ca:2e:26:3e:4a:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:7C:DB:25:ED:22:58:FF:CC:F7:F0:7A:E8:AA:A2:F6:A6:05:F0
X509v3 Authority Key Identifier:
keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f2:98:81:90:4c:9b:52:36:4e:98:1c:28:66:10:e1:f9:e5:
89:cd:e8:27:a6:15:42:d6:8d:af:3e:56:0f:fe:5e:f7:db:a0:
96:e9:de:0f:9f:b5:62:a1:64:1a:4a:8b:00:7f:d6:d5:73:ec:
7a:c5:ba:e7:78:f9:8b:d3:b9:ea:b1:4d:f2:d0:ab:fd:e9:04:
e5:00:67:a7:57:fe:f8:c0:24:4f:04:d7:0a:38:aa:76:94:c6:
39:aa:e0:78:59:35:07:20:77:43:47:5f:f4:8b:8d:25:c2:0c:
34:7c:07:5f:91:fa:1c:cb:94:d5:89:5a:6c:58:b3:ab:53:0a:
f3:93:4c:39:ac:80:d4:45:35:b0:f1:e9:53:5f:81:78:b7:52:
d5:c9:74:04:58:59:43:30:22:77:14:1b:51:2e:25:92:c6:7f:
a3:2e:b0:f4:c7:e4:24:58:49:4f:31:0c:a8:95:03:17:40:fa:
8b:a5:56:87:8b:f3:6d:0f:5d:39:a4:76:14:42:ad:31:45:9d:
40:2b:6b:18:b7:8f:c6:6d:e6:7f:81:80:b7:90:74:77:34:a1:
3d:30:a1:5f:b9:ad:dd:51:84:dc:2c:13:2b:9e:4c:54:37:74:
2b:06:30:f5:ed:3c:36:8c:c4:9a:b3:07:68:fe:25:06:61:f1:
6b:38:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:52 2025 by rpki-client