Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier: kBYBw7sQ/z6kYrRCVV94fdKu76dXbpdaxaosPhcBLwM=
Subject key identifier: 5F:E3:E4:81:48:A4:D6:FC:D9:DC:15:61:E9:EE:40:53:C3:E4:65:7E
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 019A503E1A676760D7AB93CE4A52B7FDD7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number: 09DC
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: I0eVFJ6CBvvDHb6rOlyiaIbfrT7BvZLi9gJYSAsIhHc=)
2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1a:67:67:60:d7:ab:93:ce:4a:52:b7:fd:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=5fe3e48148a4d6fcd9dc1561e9ee4053c3e4657e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:91:a3:d4:45:59:06:fe:9c:86:53:40:43:
7b:8a:d1:b7:ec:e6:95:30:30:a8:59:eb:7e:37:ad:
af:d1:ef:c8:f6:35:8c:91:bb:d1:85:0e:6d:ef:50:
85:d3:51:3d:58:37:4b:9e:97:0b:8c:2b:61:82:7d:
e2:82:9d:a5:fd:e4:6e:d0:b7:09:79:94:1e:61:62:
28:0c:7f:90:ee:ec:27:35:08:45:71:77:1b:b4:04:
6b:d0:ba:33:77:e3:28:ba:7b:45:1a:a2:12:93:78:
1a:37:e0:5c:03:54:75:62:52:cf:d2:c4:19:fa:d5:
20:8a:0d:64:40:65:ad:53:71:e8:33:73:fb:21:9d:
8d:5c:91:b1:6e:50:b5:8e:69:20:7a:07:5c:5f:d6:
62:b8:83:99:fb:0d:cf:87:a4:86:81:6c:8d:f4:57:
ee:5f:75:ce:e2:70:55:d7:7f:5d:ee:84:05:f5:38:
c0:fb:60:22:e7:d1:00:da:fa:11:d6:00:a8:3a:18:
f3:5d:9f:af:63:a4:c9:60:43:47:e4:14:98:d8:2a:
07:ab:e1:8a:d7:ba:33:2e:f9:d3:01:51:4f:da:cb:
07:f9:f4:ff:53:e1:25:05:50:b7:2b:ca:4c:92:fc:
a9:7a:2e:31:7f:59:2c:b7:af:a4:88:ad:01:cb:75:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E3:E4:81:48:A4:D6:FC:D9:DC:15:61:E9:EE:40:53:C3:E4:65:7E
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:e4:70:c2:44:b1:62:46:23:b8:e5:12:78:45:26:d9:e9:
87:08:d8:79:f5:d1:9e:1c:dc:e5:a6:7d:e4:1f:3e:fd:cf:19:
96:30:ef:32:81:9a:a4:1f:0d:de:71:bd:2b:e5:83:cb:d8:e5:
ac:f8:01:1f:f0:01:15:b2:98:83:b0:c5:00:fd:cd:88:81:7b:
44:39:3f:23:3b:91:85:67:59:c2:65:5d:2e:3c:32:31:81:cc:
78:c0:8b:53:e2:ce:0a:6e:3d:7e:db:8c:81:db:4d:31:ed:6a:
73:a4:5c:7c:d3:24:2b:9f:e5:87:e1:44:90:f4:40:19:f4:f2:
54:19:12:0e:bd:d8:d4:b1:53:30:2d:1f:ce:00:72:ce:9d:9a:
5b:fd:42:88:b4:9c:fc:6b:6d:61:3c:d8:ed:e5:a9:f1:6f:13:
83:99:8e:a4:bb:d6:8a:79:a6:cb:16:06:0a:3d:c6:68:47:f0:
ea:a8:0a:17:ee:4c:29:fc:3d:3d:78:0c:08:1d:e0:0a:9c:80:
ba:cf:d7:a2:40:86:f8:72:c2:a2:df:ec:bb:dd:fd:6e:fd:99:
ea:83:9c:7b:91:10:e5:07:a7:15:97:d4:72:69:d2:bf:40:ec:
02:9b:a8:56:d6:1b:f3:8e:da:44:cf:6e:1c:ac:af:55:d0:28:
a9:9e:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:57 2025 by rpki-client