Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: uY2P7DTu1LRBuY6DmLWMZCO/zT1WoeS1Xu8ZapX/1so=
Subject key identifier: CD:D8:B1:22:D3:A4:BB:B1:C4:EC:D9:66:04:F3:5F:1D:2B:0D:3A:4A
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 019A4EF4511A79D6B905163C35ADCE1828DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 0A2E
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: D2C9InH2K2Tb9s3/XNTVCiaSuRcDmvCilsX4PWiptyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:51:1a:79:d6:b9:05:16:3c:35:ad:ce:18:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=cdd8b122d3a4bbb1c4ecd96604f35f1d2b0d3a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:c8:22:80:a2:0b:89:7c:75:c8:04:4c:c2:
5d:6e:46:6c:85:4f:02:fd:1c:37:25:bc:04:63:fd:
d2:55:a8:60:8f:6a:ca:ff:1a:c0:88:a5:fb:f3:8e:
cb:ba:70:44:d3:7f:4c:7c:65:67:95:a9:e2:01:fe:
33:91:d8:5e:8a:9e:f1:8c:bd:40:50:05:96:42:35:
95:95:3c:b9:f3:f9:c3:6d:ca:31:40:2b:7f:ac:8d:
0f:c9:cb:cc:b1:7a:f0:af:2b:b4:58:e6:31:c3:7d:
5a:2d:96:72:19:1e:a6:23:30:4b:b7:17:a1:39:49:
36:1a:7a:6c:fc:b8:b3:36:49:98:6d:81:4b:4f:af:
9b:23:00:7b:a7:41:17:55:ec:33:ee:7a:4b:8d:70:
0b:3d:48:6f:2b:d5:bd:22:8a:f6:b3:9a:d1:24:0e:
e4:1d:99:c7:74:f9:bf:13:09:45:c9:fd:09:52:5d:
96:96:03:c6:d2:02:7a:ad:7d:af:23:b1:9e:91:97:
ad:2a:9c:69:29:fc:eb:3d:4d:7e:e5:a4:c9:13:e5:
39:fa:e8:5b:f7:fb:32:c9:21:88:39:7b:f0:e8:c2:
93:8b:fc:b8:a5:2c:68:65:06:f5:bd:09:82:52:a5:
18:ac:90:78:20:b5:32:bf:5e:69:53:c4:d7:38:e1:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:B1:22:D3:A4:BB:B1:C4:EC:D9:66:04:F3:5F:1D:2B:0D:3A:4A
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:66:32:4f:b3:49:a8:8f:4c:d0:d3:0a:b3:b3:de:a9:b1:
b1:1a:1c:7d:aa:5f:dd:8d:01:7e:95:27:18:5b:63:26:b1:5d:
36:0f:d6:ed:bc:ba:68:4b:7d:4d:12:13:dc:70:31:02:fa:44:
44:8f:2a:5b:99:9b:d5:ff:e4:b3:bb:15:8b:4c:95:6a:6c:40:
c0:be:3a:3f:8e:69:44:b0:2e:7c:dd:af:6b:25:03:32:d6:e1:
08:6b:8f:6a:e5:20:7d:0d:ad:63:1c:a8:a5:62:11:7e:39:c4:
bd:fd:5a:e3:40:2d:f5:3b:32:ad:77:d8:50:d5:1a:05:36:e1:
8f:83:d2:87:61:cf:ab:67:5f:3d:e1:45:43:d8:f5:14:b6:1d:
eb:b8:8f:5f:a9:58:44:f0:23:9c:57:c2:8f:28:f7:fd:e9:55:
3e:90:aa:46:ff:46:d6:1f:f5:11:ae:55:83:38:14:3a:e1:39:
ba:e2:f9:f0:08:b0:0d:a2:2d:2e:b3:e3:db:36:a7:a6:4e:16:
97:b6:cb:e3:eb:68:2c:41:94:ca:76:ab:93:65:4d:c9:9c:11:
a4:d0:67:f4:f5:99:b2:75:a6:19:bd:d8:24:72:21:e3:c0:16:
8c:52:ea:34:0e:d0:4b:24:f8:69:34:33:fa:28:e0:65:5c:c2:
30:12:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:10 2025 by rpki-client