Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File: FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier: 8I1QzrGKaLs5TC+uYK3SS9sZe3A9p4Bwktx5gup0P38=
Subject key identifier: D1:65:C4:E8:3E:42:B4:AC:88:CC:2C:CB:75:68:13:F3:73:5A:63:13
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer: /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial: 019A5007134A7BC46B06F026989011A58292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: v5ocY6rjVjKg2FwkmlcxDzueboK16xbun+Oaiqv0NPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:13:4a:7b:c4:6b:06:f0:26:98:90:11:a5:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=d165c4e83e42b4ac88cc2ccb756813f3735a6313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:43:4d:8f:8a:ff:0f:ff:1e:0c:df:8a:36:
55:19:19:c9:d0:f0:c3:89:bb:fe:0f:ef:ca:5a:6d:
c0:06:11:53:20:5e:18:66:da:f3:71:a6:a3:8e:51:
15:be:f6:61:03:a9:87:96:0c:69:5e:1c:3f:9e:21:
28:8f:87:1e:3f:c3:18:cf:fc:b8:83:b3:1c:d4:d4:
f6:7e:50:0e:a5:3f:e4:14:48:dd:f7:71:47:f5:02:
2e:a5:7e:ad:9d:6c:ef:4f:c0:c5:09:c8:42:5c:8e:
d5:a1:22:60:1d:df:bc:cd:d0:1a:27:51:ac:23:59:
08:79:b6:17:f8:4e:00:4d:16:d2:58:1b:e7:38:c5:
a4:e8:69:44:a4:dd:51:7a:1d:51:f7:7e:64:04:06:
8d:65:dc:69:1d:75:98:9a:da:f5:35:68:2f:84:ab:
b2:ae:ee:ac:f4:01:61:ac:3d:ab:9d:f4:54:17:36:
5c:0c:63:48:ec:ad:39:c1:26:43:dc:6d:08:75:6d:
65:28:44:3b:29:90:39:68:84:9d:c7:98:b2:5b:22:
b3:7a:dd:fa:88:8c:97:59:ac:20:1d:8d:f7:6c:75:
e6:00:fc:ee:77:c6:6d:83:1c:5e:36:0c:3a:85:0e:
15:83:4b:36:f1:a3:36:79:d7:99:49:33:e3:fb:6f:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:C4:E8:3E:42:B4:AC:88:CC:2C:CB:75:68:13:F3:73:5A:63:13
X509v3 Authority Key Identifier:
keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ac:ca:5b:82:20:73:58:03:f7:8c:0f:4b:72:83:fb:8b:94:
e9:27:7f:3f:08:ba:27:3a:7b:ac:4e:f4:5f:9d:65:0c:64:41:
71:1d:c7:65:d3:75:7d:83:a7:16:1c:37:94:cf:1d:09:a0:57:
fc:80:a7:a1:09:b1:ba:2e:7e:04:25:a8:10:e8:4e:e0:8e:4f:
cb:6d:65:80:19:94:d8:7e:ef:f6:b2:cd:20:7f:84:f7:2e:d7:
b6:5b:5c:37:75:77:e9:4e:1d:2a:b5:15:a3:d2:fa:f8:b8:45:
d0:7f:b5:45:42:9c:7c:85:fe:ef:29:51:87:da:03:1a:34:4a:
09:d1:48:d1:66:b7:14:31:21:f4:de:14:23:88:35:d7:5d:76:
7c:c0:10:c6:cf:39:92:d3:2c:3c:f0:36:5d:75:dd:34:c7:ec:
88:1f:4e:78:00:43:9d:0a:38:3d:e5:52:e2:0d:e7:0c:2a:ee:
d2:fa:a8:c3:52:2f:09:83:44:68:ae:b4:7e:87:8c:8e:58:88:
f3:f7:60:71:a9:5c:02:22:c8:da:54:f1:f3:0b:03:b6:f4:1b:
9f:99:58:75:01:86:4a:46:05:df:43:e6:79:20:a3:cc:7a:16:
ab:cb:85:10:b7:5d:65:2f:1b:d6:97:d3:f8:40:fb:ec:6c:16:
df:b8:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:47 2025 by rpki-client