Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: Kyu2X17pUUi0fHoaUQmRX+xhAYEGX/KiRild++XkSgg=
Subject key identifier: D4:B3:37:21:B2:22:42:64:F0:D0:4E:73:22:0C:B5:93:A3:39:BC:5E
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019A4DE162D0C3A1B416D6824CA6413B699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 15E3
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: G2tvlnDC0UJED+xnBKvUAT0tKG/LvAdDlyposafRP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:62:d0:c3:a1:b4:16:d6:82:4c:a6:41:3b:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=d4b33721b2224264f0d04e73220cb593a339bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:fc:26:df:18:e9:ef:e2:51:56:0f:91:5b:
76:0e:00:d4:2c:c1:5f:ae:7d:c9:ba:b7:77:7b:06:
ee:ca:97:ac:30:af:53:b0:3d:e8:a6:26:56:cb:d9:
f2:7c:3a:b7:9f:00:80:99:05:be:c5:c1:be:93:26:
8a:56:2c:9a:af:82:02:c4:a5:a6:81:10:5b:08:2a:
20:46:00:19:ff:52:e7:84:6f:2e:ce:ff:4f:2f:b7:
2b:fe:ef:ba:0a:02:38:95:76:39:41:39:38:d3:72:
e7:22:42:02:3e:68:97:41:07:85:ff:58:87:24:78:
ec:37:6e:b9:72:ea:0f:17:53:76:dd:cf:db:e0:79:
90:9e:af:8e:b8:cf:71:7d:1a:43:dc:9c:9a:f4:da:
e1:8f:71:88:af:a9:f8:01:1c:e8:da:c6:06:97:14:
e6:29:05:91:f9:80:6b:79:e5:ea:e3:df:03:d5:53:
6a:02:62:1b:04:1f:18:11:78:6d:19:2a:c5:b2:cd:
cd:71:cb:8d:50:ae:0e:52:ba:90:72:d5:5f:f3:aa:
ba:3d:f0:54:a0:26:79:e5:5d:a6:ad:73:04:a9:ad:
4d:51:31:1a:02:0c:c9:b5:6a:99:1c:9e:af:b8:21:
f8:97:6e:e7:80:c1:df:19:09:84:d4:d0:61:fc:3d:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:37:21:B2:22:42:64:F0:D0:4E:73:22:0C:B5:93:A3:39:BC:5E
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8f:87:9c:ab:24:ac:63:44:17:d2:8a:24:7f:d0:d3:0f:51:
b3:1a:fe:44:52:a6:10:4a:11:f4:34:dc:5b:13:13:b2:48:cf:
09:5c:1a:76:7e:31:11:d4:da:b3:1f:cb:8d:0b:48:9a:f4:59:
8a:88:75:00:c4:5c:66:04:b2:b4:d6:f0:99:3f:86:46:f1:b1:
3f:87:c0:24:00:e2:fb:3d:ad:d4:d7:f5:be:9c:70:52:91:03:
74:fe:20:13:85:83:d7:db:e6:e0:50:fb:93:0c:94:e1:b4:d9:
03:94:7a:fe:56:fe:c9:25:92:67:a4:fb:20:02:44:d8:47:18:
9a:30:56:96:42:42:7f:d8:e7:71:5b:d2:10:e2:e8:aa:d5:b1:
31:d8:dd:5c:f4:7f:65:55:8e:5d:bc:4c:c7:09:0b:89:6e:f3:
f9:e6:5d:fb:07:50:9b:6e:83:56:67:29:02:bc:00:e1:b9:fd:
84:10:8b:1d:49:68:57:b5:5a:8a:a8:16:db:54:be:32:ab:f0:
6f:ad:87:93:92:bf:77:c4:b1:b8:91:e1:76:67:ed:d0:20:c5:
33:49:d7:4b:71:6f:6e:ec:0c:79:97:df:3f:de:e7:7c:56:74:
b4:49:35:2d:ef:30:de:80:a1:75:d4:16:62:71:c5:d8:0c:e7:
99:3a:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:04 2025 by rpki-client