Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier: hx33WTonVSEn3Cq6O7NJDE3Rg9nq9MnlLxIYFg8HfIA=
Subject key identifier: 90:5D:2C:C3:55:49:C0:2C:54:1D:FF:60:2E:6A:D7:CA:3D:4A:E0:94
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 019A4DE1870740F11EA8A47EBAA77A7CAE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number: 0D03
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: sGYjt3HhC4FKyHdhbQIWdhBJex+iOoHecMsKRAMUBRA=)
2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=)
3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=)
4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:87:07:40:f1:1e:a8:a4:7e:ba:a7:7a:7c:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=905d2cc35549c02c541dff602e6ad7ca3d4ae094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:ee:1d:47:33:d4:db:de:4a:d3:9b:db:af:
7a:e9:6e:fc:13:4f:d4:7b:9f:86:63:71:d4:bd:ae:
e7:71:dc:d6:49:9a:4a:3c:49:0b:2b:ff:24:21:bc:
ce:f8:11:c1:87:cf:e0:75:0a:cd:ae:7d:22:d4:c8:
21:74:cb:aa:7e:0c:1c:28:eb:f6:86:ae:af:c1:8f:
df:df:a8:d1:a5:a8:0f:2f:56:c3:13:d8:ad:92:d5:
64:af:00:a7:42:e0:62:12:5d:6f:bc:43:af:79:2b:
25:d3:bf:69:29:ae:24:48:46:72:45:47:21:41:f4:
12:60:32:24:09:1f:ed:ef:84:f8:b0:4b:d8:c0:68:
ba:02:37:a1:00:24:f4:22:52:8b:ab:73:97:7f:25:
42:49:8e:9b:de:cc:71:1b:04:1d:51:58:b1:be:79:
6e:67:49:ab:c7:21:cf:1d:7d:56:e0:cc:62:6b:39:
ab:7c:bf:e5:6b:56:68:5b:1d:4a:e5:92:d6:58:4f:
a7:79:a5:cf:d7:9a:12:3d:60:43:de:dd:4f:12:14:
86:bc:0c:06:2a:a8:6b:00:83:b7:46:a1:57:d4:8b:
b7:23:be:eb:f2:0f:a5:84:88:d0:21:ae:d7:19:cc:
e7:8c:d6:fb:9d:c8:0e:d8:d5:76:51:5e:79:77:d2:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:2C:C3:55:49:C0:2C:54:1D:FF:60:2E:6A:D7:CA:3D:4A:E0:94
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ce:75:00:70:c4:f4:6b:50:25:18:ad:46:17:95:46:3f:37:
f6:d9:99:5c:d5:c1:ee:f8:48:21:31:ae:fc:9b:1d:7d:f2:cf:
d6:43:19:7c:1d:49:2d:79:1e:bb:68:9a:c9:74:3a:21:71:cc:
7f:e0:89:dc:8f:39:3d:d2:59:8e:2b:df:c5:e8:70:fa:50:1e:
7c:69:5c:c2:80:a9:25:2d:df:69:01:77:a1:84:8d:65:97:be:
1b:77:f7:9b:35:76:4c:1a:67:1d:31:02:4e:5b:c3:88:c3:09:
48:1c:c3:ba:8e:d8:36:1d:bb:11:86:7f:52:ec:0d:8d:f8:02:
6b:18:14:f5:33:39:0e:bc:3e:ca:c4:96:76:c4:86:9c:d7:5c:
8d:f8:c3:c3:5d:46:0d:ab:3d:94:db:02:e1:fd:b8:5f:b8:18:
53:33:e8:6c:02:f6:87:34:85:df:4e:f3:59:c2:1a:83:95:c1:
74:c7:22:b9:2d:00:aa:2c:19:8d:41:47:0d:6a:aa:a8:61:81:
be:0d:05:73:9a:41:dc:5c:c8:ae:92:b2:77:10:17:6e:48:a4:
22:80:6a:77:9f:25:2a:d3:2f:eb:4f:71:56:80:61:98:ad:74:
03:6e:d7:38:3e:d4:ae:c6:0c:b1:26:2a:2a:c1:64:fd:56:cf:
b9:a0:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:28 2025 by rpki-client