Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: SA5pj9ZsoZ9EWLS/AtS1yUyffFFwl8/fMMuBuZZJKdw=
Subject key identifier: F2:EC:2E:E2:65:30:4F:04:7A:BA:00:74:D6:DD:0F:2D:75:EC:79:10
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019A4EF47BBB654716F1A4D03BD978D9835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: RIXE52tTDm9h8pYbvaBQ5eNPIV1SW0WMVBLJYKPh+QI=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7b:bb:65:47:16:f1:a4:d0:3b:d9:78:d9:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=f2ec2ee265304f047aba0074d6dd0f2d75ec7910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:5c:4a:2c:b4:a5:2d:0c:5a:84:1f:03:32:
95:e6:75:37:d2:38:2e:3f:94:dc:4d:b4:d3:a5:ba:
7a:f9:48:d4:f7:cb:30:d2:d4:f3:89:96:c0:a3:d8:
8a:18:2d:d3:d2:f3:73:22:8b:c8:42:6b:ee:b7:f8:
90:2f:64:f3:68:60:84:d8:c4:ff:1b:16:7f:52:ca:
3c:3b:8a:89:6e:d9:79:5f:5b:40:a6:1a:df:95:47:
30:3e:7d:16:36:ec:54:73:e4:ff:dc:a0:46:9a:8f:
b6:f7:1c:ff:bd:c7:f5:4d:1f:8e:d7:8b:11:5d:2d:
04:6e:b0:e3:7a:db:a4:9a:38:ce:85:85:20:7f:c5:
5e:05:77:63:63:8a:cb:e2:df:37:b2:9a:36:d8:9b:
2b:c3:1b:db:5a:a4:39:8c:8c:9c:1c:1c:2e:d6:75:
b2:8f:9e:3e:a9:96:76:02:3e:7e:ae:4b:f0:d8:01:
52:4c:32:1b:d4:e8:4a:f1:db:ba:b8:32:b9:dc:ee:
48:31:df:33:9c:9f:fb:1a:aa:19:85:9e:3b:88:7d:
43:df:07:e0:58:da:12:fe:f4:0b:2d:6e:ff:50:57:
aa:cd:fa:a0:be:0f:a5:f9:78:d1:52:82:43:7c:99:
39:31:dd:00:9d:b4:82:2e:e1:6b:c8:46:a5:67:e9:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:2E:E2:65:30:4F:04:7A:BA:00:74:D6:DD:0F:2D:75:EC:79:10
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:94:b7:c2:64:c9:ae:7d:13:6c:69:e8:4a:7c:28:7a:aa:
53:22:6c:3d:24:4a:7f:e5:47:49:f9:33:b9:ab:f0:c3:a1:8b:
33:13:f4:11:ce:a0:c8:33:9b:d5:ac:f3:3f:3e:35:7a:a8:64:
87:5e:6c:d9:11:b4:2c:ba:be:10:ec:71:21:92:12:11:8d:ef:
83:df:ad:26:ed:de:ec:f4:22:4f:b8:0c:50:ce:3f:57:f9:79:
1e:48:1d:cd:24:27:a6:18:7d:a8:32:be:02:b6:58:01:db:b1:
35:db:c4:bf:42:2a:1f:19:37:be:0a:67:07:53:ab:b5:dc:c9:
f3:59:ad:ee:ab:15:2d:3d:89:63:f9:e3:21:6f:0e:1c:1d:19:
5f:4b:7d:42:64:5e:be:89:18:bc:4b:6e:e8:40:c4:1e:be:fa:
35:7f:a0:83:84:4a:b4:be:79:17:0a:05:54:3b:91:87:0b:59:
e6:df:af:61:27:e8:f0:b8:d0:3e:a2:61:70:45:b8:c5:f8:36:
5f:38:c1:38:68:0d:33:6f:a3:b6:7d:aa:10:0e:43:d2:ad:83:
41:0b:c9:af:a7:c7:83:05:41:92:89:cc:97:8e:9f:e9:e0:0b:
66:4e:c2:1a:9e:dc:2b:13:a9:bd:5b:7e:89:4e:66:1e:b7:a9:
d7:c7:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:05 2025 by rpki-client