Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: blxiYXcwqi42jXpBlmFxfvz8IwM1PFJvYA2fBEAEk+k=
Subject key identifier: AD:98:A2:E3:95:AA:A4:4B:98:B8:79:1E:37:E6:A0:EC:86:3D:37:25
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 019A4F630552D980481319016B403C06EA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 04B6
Signing time: Tue 04 Nov 2025 15:01:20 +0000
Manifest this update: Tue 04 Nov 2025 15:01:20 +0000
Manifest next update: Wed 05 Nov 2025 15:01:20 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: 6fw/BTRzIgZpeNEJRjVpwq02lAzYAUv2BgZ+KTLRLN0=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:63:05:52:d9:80:48:13:19:01:6b:40:3c:06:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Nov 4 15:01:20 2025 GMT
Not After : Nov 5 15:01:20 2025 GMT
Subject: CN=ad98a2e395aaa44b98b8791e37e6a0ec863d3725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:bc:d4:de:92:e7:67:1a:a7:cb:b8:da:c9:
ae:14:34:2b:c5:69:3e:b8:b2:f6:ed:51:18:6f:50:
3a:ac:5c:2e:8e:60:5f:b3:20:fd:0c:89:d8:30:9a:
9e:3d:31:7e:d3:a6:5a:2b:d4:6f:77:34:39:0f:04:
1a:fe:e1:7c:ed:d8:8b:1e:55:71:30:66:54:e8:68:
90:a8:1b:cc:89:f5:26:c4:b0:1e:12:c3:9d:65:be:
d2:f1:bc:0a:4f:28:d4:67:77:15:37:25:3a:ff:52:
81:ee:0b:cc:16:54:82:26:80:e3:ce:18:2e:6a:ea:
31:ff:17:0b:89:7e:a8:24:76:62:ef:8f:a4:ef:8b:
29:db:84:c3:8e:f3:8d:f1:28:8d:c0:53:2b:04:a1:
48:42:d9:5c:26:01:03:b1:b9:f1:cb:b7:e5:43:fa:
67:00:0f:77:25:49:12:50:fa:09:33:c8:20:07:4e:
74:78:aa:10:48:5d:dd:11:1c:24:ad:0c:df:d3:5c:
64:1e:cb:11:61:22:dd:c7:1f:0a:af:77:9c:43:7b:
b4:b4:b5:d1:8c:03:56:c7:5c:f4:05:c3:96:d3:ed:
0b:0e:61:2c:05:be:e7:8d:71:d9:af:04:67:b2:a7:
a0:33:45:1c:cb:62:34:53:5b:ba:72:9f:52:96:c6:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:98:A2:E3:95:AA:A4:4B:98:B8:79:1E:37:E6:A0:EC:86:3D:37:25
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:2a:75:09:bc:7a:63:f5:a0:c3:ac:1a:39:ce:5d:4b:16:
20:a7:f0:91:d9:98:35:05:b0:af:97:93:a1:6e:53:e4:ae:b8:
78:fe:66:f7:8b:f6:a0:da:28:0d:31:76:20:66:96:95:ed:ec:
b8:2a:c2:74:6c:29:61:1e:18:55:da:c6:c8:7c:dc:ef:19:02:
c4:c3:99:42:b0:6f:72:93:43:93:6b:b2:4a:15:96:b1:5f:9b:
da:e1:01:31:db:6f:34:9f:90:cc:c6:00:da:d8:09:e9:3a:2a:
c1:bb:fa:a2:bf:d8:e5:b2:31:b8:da:67:b3:4e:33:57:ba:23:
b6:b5:e1:47:c9:c6:73:0c:16:22:79:98:07:0b:b9:30:27:7a:
6c:83:11:d2:07:87:7a:27:e3:ed:52:ea:85:5b:74:91:f8:1b:
20:43:37:01:8f:bf:73:29:3a:05:e5:52:6e:83:1f:cc:ae:ba:
32:ab:34:0f:fe:50:f8:f9:b3:f8:73:c3:00:9e:eb:76:39:0a:
65:84:61:6e:f6:15:15:3a:ac:2e:d1:12:93:be:d1:cb:b9:cd:
91:ae:a0:be:ee:51:e2:aa:8d:21:dc:2c:dc:60:56:3f:ab:e0:
1a:3f:d4:d7:cd:d1:17:01:f9:ab:16:68:08:f4:f7:2a:52:e8:
bf:5d:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:39 2025 by rpki-client