Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: 0CBrxiIIh0Brhpg/utg0VHZ5N9zw/iw7NWioUgCHKIA=
Subject key identifier: 1F:AA:FC:76:BE:F3:44:71:20:67:55:79:18:86:67:1B:DD:72:84:14
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 019A52D165FC3F755F4CF621678CE8DE3DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0FFB
Signing time: Wed 05 Nov 2025 07:00:46 +0000
Manifest this update: Wed 05 Nov 2025 07:00:46 +0000
Manifest next update: Thu 06 Nov 2025 07:00:46 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: pvaVHBxrTfGF/DTln97Gkdh+7pHmbwNf8CYsL2QSXic=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:65:fc:3f:75:5f:4c:f6:21:67:8c:e8:de:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Nov 5 07:00:46 2025 GMT
Not After : Nov 6 07:00:46 2025 GMT
Subject: CN=1faafc76bef34471206755791886671bdd728414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2f:3a:3e:aa:6e:a0:8d:46:05:22:3d:2c:10:
40:05:6f:b0:c3:db:6b:6b:32:c3:1b:1c:d7:d7:98:
32:18:00:f1:a9:61:c1:32:8f:d7:e7:d6:80:bf:28:
dc:84:8b:a4:68:42:58:9c:8a:e4:ef:b3:ca:55:8a:
c8:d6:29:c5:51:61:dc:94:1d:00:c4:bb:a1:ce:7f:
f4:f2:c9:dd:83:e3:80:91:41:f4:a0:b6:fc:b5:34:
ea:ac:da:fa:19:55:d0:9b:d5:d4:d3:3a:e4:77:e8:
92:ca:28:96:16:11:32:0f:a0:9e:fc:92:97:52:0e:
1b:34:ec:1d:b7:6d:66:b1:55:c9:79:f9:d9:da:b8:
7e:b1:7a:6b:f2:5e:9f:c9:f0:4e:53:b8:52:af:d7:
1d:32:fd:95:1c:00:c5:bc:8c:71:b1:7b:c7:03:3d:
d7:51:4b:e7:87:25:a1:6c:21:71:76:5b:e1:2c:1b:
33:67:1b:e4:46:aa:cd:e3:02:49:0d:c6:eb:c6:5c:
fa:56:a7:8f:a6:b0:b8:11:21:e5:bc:0a:a4:e0:21:
4c:d6:14:f1:fe:7c:05:65:a9:09:a1:2d:48:e7:6f:
c6:63:7d:18:16:c0:18:80:36:64:9b:a7:c9:fd:36:
ea:cc:c5:d7:70:f5:51:ed:61:9a:ad:85:05:15:2d:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:FC:76:BE:F3:44:71:20:67:55:79:18:86:67:1B:DD:72:84:14
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:01:a9:ae:9e:e6:0a:3f:e2:e4:7d:14:d4:5a:4a:97:26:6d:
36:e6:06:b1:f5:e4:29:44:db:46:9f:8e:a0:62:fc:b4:39:0c:
1a:67:29:c1:f5:d6:39:e7:dc:05:2e:5d:a9:8a:f0:84:fe:40:
97:79:76:27:74:62:e7:93:54:f9:c3:e6:6a:dd:0c:94:ec:b7:
a9:b1:11:69:2f:68:dc:22:3d:a5:33:ec:3e:e9:fc:ec:7f:8d:
5d:b8:76:7d:fd:62:b6:00:36:ce:f4:aa:bf:47:bb:81:4f:70:
5b:48:77:78:2c:3c:38:33:d1:ab:43:34:cb:60:dc:c9:74:47:
38:37:2e:3e:72:ec:d4:f8:4c:43:d7:2f:1f:f3:a1:83:61:25:
cd:c3:b9:eb:37:7f:8a:8c:91:8c:bf:62:94:30:9d:4f:b6:72:
10:bc:78:85:2e:a5:c3:cb:d4:1a:61:dd:d8:0a:e3:05:65:3f:
ef:d6:3f:fa:e2:f6:5b:3c:90:7a:83:24:96:e2:a9:f9:1f:65:
72:a4:a5:36:22:c4:58:98:99:f3:30:63:72:f7:91:ac:ae:ef:
ab:99:42:e4:53:b3:95:91:61:cc:94:6f:d2:90:c7:a7:e6:dd:
e7:3e:7e:48:44:e4:f7:af:49:22:0e:00:aa:6d:8d:92:d4:59:
ce:b9:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:49 2025 by rpki-client