Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: d9UJ59qGiUB2MXECJ6uTdchBZTS/b2y5RTJ57ZHxYpA=
Subject key identifier: 5F:8E:3E:02:38:7A:0D:3A:81:68:ED:61:20:25:95:75:23:30:83:C3
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 019A54C0A04093555D69414373B3C20DF86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 16:01:41 +0000
Manifest this update: Wed 05 Nov 2025 16:01:41 +0000
Manifest next update: Thu 06 Nov 2025 16:01:41 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: wkhqYQe8g1qbBETP4YPOw5X6UfIA3ryMmZaQy91jI0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:a0:40:93:55:5d:69:41:43:73:b3:c2:0d:f8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Nov 5 16:01:41 2025 GMT
Not After : Nov 6 16:01:41 2025 GMT
Subject: CN=5f8e3e02387a0d3a8168ed6120259575233083c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:22:74:9a:61:ce:9b:4e:28:cc:59:e1:1d:
06:c8:64:e1:ec:92:b6:53:c4:3a:db:68:49:cc:10:
ed:b7:c4:3c:68:b4:dc:40:ce:e5:fc:aa:90:1c:d6:
af:06:6f:1a:7b:b9:36:c9:d9:0d:0c:09:d4:1c:c0:
a4:82:fb:58:90:b5:7d:a3:75:e2:12:de:8f:c0:c2:
0c:c1:13:aa:06:31:31:06:10:fd:74:43:32:47:c0:
fb:3e:c2:ea:fb:e2:a3:8a:9b:d8:b4:35:a1:b7:cd:
5c:15:76:a7:26:b9:eb:f1:fe:06:b1:1a:19:9f:88:
9c:f5:1c:be:1b:70:0c:00:69:30:50:91:51:66:85:
48:fc:02:f4:66:d3:be:7d:fb:f7:df:fe:f3:78:39:
46:1a:16:da:da:d2:27:da:70:44:da:ea:b1:42:09:
e2:d7:73:06:7e:9f:92:c2:03:50:83:34:7f:a6:f1:
bd:a3:b7:ed:23:32:e0:96:fe:54:94:6a:3c:e3:c2:
60:62:f0:fe:b6:66:f3:91:d2:cf:f8:d2:4a:7f:91:
30:7c:b0:04:50:47:5a:fa:ff:60:57:01:95:20:fe:
c7:86:0a:9e:b2:dc:4e:1b:f4:a0:8e:f7:a2:7a:c3:
75:8e:ff:0e:8e:7f:76:c3:79:6d:87:2b:b7:fe:77:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:3E:02:38:7A:0D:3A:81:68:ED:61:20:25:95:75:23:30:83:C3
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:63:f7:7c:e6:b6:0c:0f:20:bf:d4:53:c8:8d:ca:8d:15:05:
da:26:33:19:e1:f8:87:fe:44:10:42:47:ac:49:d1:33:a8:cc:
b3:51:37:f0:15:63:b4:64:6a:c6:28:3a:50:08:b0:27:51:45:
49:96:d7:33:c1:41:b0:2c:33:0e:ea:80:7c:99:59:b7:02:ca:
0d:8a:b6:3a:fc:94:55:6e:d3:86:99:68:bb:69:6b:85:75:8f:
20:6b:38:f2:d0:16:21:d5:1d:bf:0a:83:41:85:19:de:fb:55:
91:24:6b:4c:ec:87:cd:fa:f8:07:d7:f6:78:db:0b:a3:b5:a2:
92:48:bd:94:9a:1c:47:44:1a:35:b8:0c:1f:e2:d3:4e:02:e0:
92:4c:7d:ba:5a:35:85:48:2b:e2:b9:c9:9f:2b:a2:54:1d:f0:
dd:c9:08:24:cf:d8:3c:9e:ed:ea:ff:33:12:ad:0a:68:13:87:
d5:a3:f1:51:f6:69:be:a3:81:61:f5:6c:74:02:9f:69:36:80:
d1:d3:12:8f:37:5f:e4:45:45:14:03:88:02:7f:91:b2:8d:ab:
7e:f3:fe:21:5e:23:62:72:23:64:ab:78:47:4a:9e:5f:52:2c:
c3:14:5c:cd:b8:12:ca:8f:0e:c3:4d:74:d9:b8:d9:9e:ad:5a:
e0:6c:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:37:28 2025 by rpki-client