Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: hwsn6gLVF3Q4bt/rzGec1pUSGNFxBDmjldrGPhvsaHw=
Subject key identifier: 0A:3B:93:93:F8:B8:AB:15:AF:10:DC:3F:3A:9C:59:81:A8:AD:2C:5F
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 019A53085C49C4073B176DF95C837B085FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 0A2F
Signing time: Wed 05 Nov 2025 08:00:48 +0000
Manifest this update: Wed 05 Nov 2025 08:00:48 +0000
Manifest next update: Thu 06 Nov 2025 08:00:48 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: Bq4a/u9TcCR/8il+QDfXLGckn2CPazCSKdKnoFhHASU=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:5c:49:c4:07:3b:17:6d:f9:5c:83:7b:08:5f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Nov 5 08:00:48 2025 GMT
Not After : Nov 6 08:00:48 2025 GMT
Subject: CN=0a3b9393f8b8ab15af10dc3f3a9c5981a8ad2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:13:9e:b8:ef:95:2a:ce:10:1e:66:55:dc:
2f:c1:f3:a3:a7:15:12:2c:e2:83:d7:e9:a4:aa:91:
ff:37:7f:6b:3d:69:cf:d7:27:1a:00:b1:23:51:0a:
3d:1b:2f:f0:b0:a4:59:0f:4d:5e:b9:19:e4:ea:4f:
4f:da:4e:d8:4e:ee:44:6d:55:f5:03:25:20:83:40:
ac:c1:c2:cb:b5:60:6d:44:a4:61:94:b0:66:c0:08:
4d:60:e1:3f:40:3a:43:08:4b:d5:a9:e0:e3:94:4a:
cc:28:22:88:83:e7:77:61:fe:58:69:41:b0:d1:af:
92:ab:94:51:ba:3b:27:bc:69:5c:9e:47:b0:e2:c5:
58:88:8d:ee:51:cf:2d:d5:ce:48:ad:91:54:27:7b:
b0:bb:0d:50:8a:50:8a:20:4c:9b:63:32:2c:db:6b:
63:a1:1b:c7:00:8e:b3:27:39:b3:5c:95:4d:23:19:
38:ba:73:9f:2a:dc:81:86:7f:2c:27:3d:2e:b2:47:
1b:9b:26:f3:b0:0b:96:14:d5:30:e9:02:28:cf:fb:
fc:64:31:0b:d9:5b:07:52:a0:54:05:4b:71:82:36:
fe:b9:6c:23:fe:97:33:9f:28:0b:5e:c1:cf:d6:32:
56:31:f7:66:78:4e:9d:2a:46:ca:56:5b:7f:e5:d8:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3B:93:93:F8:B8:AB:15:AF:10:DC:3F:3A:9C:59:81:A8:AD:2C:5F
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:b8:79:9e:d8:da:20:a3:22:80:dd:e6:61:51:e4:00:43:
b2:ea:b9:78:4f:4e:20:b8:9a:91:a2:82:3d:95:b4:9e:de:1a:
39:5b:30:f8:9d:df:0a:a8:57:4e:75:df:c4:15:82:a1:fb:93:
df:51:6b:f7:2f:0c:e8:c8:da:4f:2a:94:4c:04:e6:7a:fb:64:
7a:96:0a:cd:2a:f2:5e:96:0e:6f:df:43:96:78:14:ac:83:3e:
fa:72:db:47:94:63:e4:11:2d:95:f4:61:a5:2f:6a:17:a5:3a:
a1:92:9d:a3:17:2b:16:32:20:b8:b7:91:6a:6e:50:7c:4d:88:
60:d3:18:0e:6f:a6:54:81:af:1c:b5:5a:49:c2:01:44:0e:d2:
9f:50:ab:ba:a1:81:38:54:1c:a7:df:ff:d3:ba:3a:24:bf:00:
41:45:d7:5f:ee:2a:f1:32:b2:a8:c2:ee:38:41:a9:2b:b1:24:
61:da:53:3c:91:78:60:1c:35:71:00:4d:a6:64:8f:e9:32:e7:
25:d7:47:ea:7e:09:1a:79:92:22:6f:aa:56:af:47:5a:5c:83:
dc:c2:64:9c:49:7d:5e:2c:1c:59:55:8b:0e:be:30:e9:0e:cd:
aa:b1:11:cb:8a:89:a2:87:e3:0b:10:65:51:97:38:46:e5:0a:
b9:72:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:36 2025 by rpki-client