Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier: 7E7CdXzTFDKf029i7aPLZrmcAz3fNCyEIsRky/Ja+Jc=
Subject key identifier: 59:F4:50:A6:1D:EC:D0:3F:B0:69:D0:EC:5A:21:57:ED:EB:9D:2D:37
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 019A533F79A635E8F370AF66C78C25F209B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number: 03F6
Signing time: Wed 05 Nov 2025 09:00:59 +0000
Manifest this update: Wed 05 Nov 2025 09:00:59 +0000
Manifest next update: Thu 06 Nov 2025 09:00:59 +0000
Files and hashes: 1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: vRE7+UhPiyl32jzrfcydRcsQnqA6fMpifXPDhOl9F+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:79:a6:35:e8:f3:70:af:66:c7:8c:25:f2:09:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: Nov 5 09:00:59 2025 GMT
Not After : Nov 6 09:00:59 2025 GMT
Subject: CN=59f450a61decd03fb069d0ec5a2157edeb9d2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:5d:19:c0:9b:f9:dc:31:66:75:83:49:18:
30:89:79:5a:10:60:3b:84:90:84:5d:75:38:ea:dd:
06:a0:05:e0:fd:4d:16:ba:c0:ad:e2:f5:44:c8:28:
31:81:da:48:06:43:d2:c8:3e:36:5b:a4:52:52:70:
5f:42:f9:a7:12:f3:5b:83:a0:15:cf:53:4f:8d:1e:
d1:0e:52:8b:7c:e0:10:e6:73:b0:5d:cc:c1:ac:38:
6d:43:13:09:59:b7:b7:7e:ef:41:91:03:34:6b:b9:
fa:0f:86:ed:7f:31:b9:5f:1e:d8:60:a7:24:8a:ca:
15:bb:7e:d7:1d:9b:54:e4:f9:d7:16:9e:1e:d6:f5:
7d:92:58:40:34:8f:0e:7e:66:8a:7b:7e:ec:78:a2:
8d:5c:21:8d:36:8a:59:ee:e1:83:9b:a3:61:3a:2b:
70:7b:4b:c8:2b:83:8c:e6:e8:3f:3d:18:80:1d:87:
5d:33:49:c3:fd:2a:2f:1f:da:9f:0d:5a:4c:64:61:
b0:be:79:2f:02:49:00:9e:bc:7c:04:b3:05:5a:58:
55:38:b7:bc:01:a6:cb:8f:64:00:0f:89:c2:0b:da:
20:10:ac:66:59:93:e5:7a:9a:85:24:d6:85:b2:b4:
6f:37:47:13:08:8b:8b:11:cd:39:a9:5c:eb:08:96:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F4:50:A6:1D:EC:D0:3F:B0:69:D0:EC:5A:21:57:ED:EB:9D:2D:37
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:13:63:59:5c:6b:20:6f:4a:94:3c:54:53:2b:e0:fd:de:85:
cd:44:43:56:80:ab:99:b8:d0:1e:81:c4:e7:60:b6:06:83:4e:
c2:22:1c:e0:bf:60:ca:f6:99:b3:1c:8a:32:11:63:ed:19:44:
05:54:6b:ee:db:41:3b:ce:8d:46:49:ce:21:53:7a:38:b7:b4:
ae:ef:e2:a0:c2:c3:3c:08:70:db:07:f5:52:24:a3:36:e6:4b:
48:24:e5:a3:ca:22:79:91:59:20:36:37:ee:33:b5:56:16:c8:
cd:da:ac:ec:76:23:5c:1d:94:c4:10:4a:10:93:a7:c5:d1:5d:
82:ef:02:86:c9:c5:ae:b0:11:69:3b:7c:d7:f6:1b:4b:89:84:
30:eb:8b:52:f2:10:21:92:17:e8:79:8c:d2:69:ef:9d:bc:fd:
61:9d:62:97:49:b6:db:a1:07:c1:b0:1e:20:54:d8:1b:bf:ec:
86:aa:5a:18:cc:d7:28:4e:1d:0c:a5:6d:91:4e:85:1b:05:bc:
eb:8a:30:07:fa:9c:c5:6d:0e:04:7f:3f:b2:1e:e5:ea:a0:8c:
d2:9d:7c:f3:bf:7a:af:d4:d5:fd:83:5c:76:f0:73:ff:6c:2c:
24:3e:0a:c9:2b:58:f8:de:d2:22:78:fb:51:4c:aa:2e:bf:60:
b2:c7:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:45 2025 by rpki-client