Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: lUEdfHX36KXQfnxrlKUSo6MQfFVnPwkD23cGfPBtQi4=
Subject key identifier: EF:87:4F:CC:1F:3A:D7:32:04:A0:3F:06:3B:A0:49:57:D4:D7:B6:3F
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019A4DAAB2685A1367A50E510BD4D2ADCF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 09B0
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: 7Ol1frZgTkzg6OMpNtHbsu/DM3Aqo4GVp0JoqGoSpeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b2:68:5a:13:67:a5:0e:51:0b:d4:d2:ad:cf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=ef874fcc1f3ad73204a03f063ba04957d4d7b63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:a6:24:3b:a8:0a:f6:48:3a:88:66:e7:11:
86:ae:7b:5c:fe:88:26:cc:8e:fe:d8:64:fe:8f:25:
9d:a3:23:f6:06:98:1b:91:44:f7:38:d7:4e:ab:8c:
56:c7:aa:a1:1c:c0:08:2a:e0:a0:ea:b3:c0:69:f3:
2b:19:d9:f4:de:87:93:3c:89:3d:df:0f:c5:32:02:
6f:51:3c:ba:c5:23:f7:05:98:84:d3:74:a4:2a:f8:
30:b3:4b:76:c2:11:bf:63:99:f6:c5:90:f0:a7:79:
4c:84:02:17:b9:4c:c6:a2:11:d0:f3:17:22:43:ec:
f3:78:21:42:ca:7e:a3:9f:6b:79:47:c3:f4:68:f5:
d3:76:f8:0b:70:0d:39:09:aa:fd:34:9d:22:b0:56:
b6:8f:f8:fc:8e:c3:72:34:e3:80:ec:bc:d6:00:b2:
be:83:69:f4:48:e8:e5:be:77:c9:18:a8:1a:b6:38:
56:ed:d6:0f:05:ad:48:04:b6:86:1c:bd:1e:d7:1f:
71:71:d3:53:e2:0a:60:75:e2:2e:b1:46:76:eb:f6:
21:42:6b:10:18:cc:f2:8b:56:f7:87:46:ad:e9:9b:
55:b7:0b:b6:10:5b:10:94:97:41:3e:05:d3:e6:be:
64:f5:4a:88:9e:2b:04:39:0d:f1:30:ae:63:bf:b0:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:4F:CC:1F:3A:D7:32:04:A0:3F:06:3B:A0:49:57:D4:D7:B6:3F
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:83:d1:7f:b7:d1:cf:4f:da:ba:dd:da:02:3d:ea:7f:f9:
41:26:5b:d1:3f:01:3a:6a:f4:cd:90:73:7b:56:bc:bc:e4:a7:
6e:31:97:34:48:01:e5:63:b2:89:3a:6c:ee:e0:ec:91:d9:d6:
f9:75:87:e6:3f:e3:dc:08:57:37:9f:b1:e2:f0:e1:a3:16:04:
96:13:3b:ad:08:6b:3e:30:6e:ae:6e:98:1f:78:e0:1a:65:21:
d4:fd:cc:af:5e:51:b2:69:fb:99:44:97:cf:7a:3e:a1:0f:4a:
2b:cf:f4:f3:5b:92:57:1d:87:1f:70:80:47:10:f9:7c:5b:ca:
40:b4:69:2e:9d:84:41:7a:a6:8f:44:3f:85:f5:71:37:17:86:
2a:29:11:58:d9:4a:1d:27:ff:69:ea:9b:c9:6e:0a:ea:f7:56:
cf:c5:28:7c:9b:9d:c1:19:0f:1a:f7:95:3b:cf:99:72:91:d5:
b1:a9:f9:0a:50:59:2e:1f:53:43:94:99:33:7f:22:9b:55:f5:
ec:2a:41:cb:f2:1c:a4:58:71:f6:e8:5c:1d:97:fc:6a:9c:26:
65:6c:b8:26:02:82:ea:fe:e0:80:d4:e3:e4:e2:2b:5a:32:c1:
47:81:d7:1e:94:ce:70:22:12:de:dd:9b:8d:cb:fb:a7:e5:75:
a9:ef:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:18 2025 by rpki-client