Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: pn0UtNuFxJo0LMpG0Z1REyPrLagqvlHbRWl/USW/JpI=
Subject key identifier: FE:FD:C4:54:7C:18:87:66:5F:46:5B:0B:9A:10:96:F8:9D:2B:01:48
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019A53759CDFAABE3E556325DF6A999E0C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 10:00:07 +0000
Manifest this update: Wed 05 Nov 2025 10:00:07 +0000
Manifest next update: Thu 06 Nov 2025 10:00:07 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: 7+UbKubWgOcHVkNIVCnY4G82P3sjscDjmADMU1hny7M=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:9c:df:aa:be:3e:55:63:25:df:6a:99:9e:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Nov 5 10:00:07 2025 GMT
Not After : Nov 6 10:00:07 2025 GMT
Subject: CN=fefdc4547c1887665f465b0b9a1096f89d2b0148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:a3:81:81:89:95:46:45:7c:3f:92:b6:83:
a7:1c:16:05:02:1e:3c:f6:45:30:0f:14:0d:74:a7:
13:ef:5f:ca:c3:a0:41:21:13:67:f5:36:8b:73:58:
82:16:9d:d7:2c:ad:7e:e6:43:53:92:48:d6:fb:d6:
7b:af:ed:cd:c1:59:bb:e8:80:b0:31:34:67:ef:22:
b1:60:c6:94:2b:fd:39:dd:41:72:86:4b:ff:eb:e8:
e7:15:1d:23:50:b6:ba:9f:56:21:00:3d:77:1b:10:
a4:5f:2b:02:51:13:0b:86:0a:f6:78:91:f8:b8:9b:
3f:2c:3c:bd:7e:6e:b3:e0:55:42:1c:e8:ae:95:2c:
1d:ac:c6:5f:6a:8f:12:3d:17:4c:d9:f4:f2:89:55:
58:66:2d:54:b9:d9:a8:68:75:df:7d:91:8d:8e:27:
8b:cf:7b:e8:1e:1c:c1:a6:bb:7f:1f:27:d6:4d:ae:
f7:c6:ed:bd:6c:f6:37:63:f0:7a:a1:72:e6:fc:2d:
63:d8:f8:69:9c:fc:b3:a0:48:f9:91:1f:2f:1a:5e:
2d:53:e3:0d:17:73:16:db:dd:d9:50:11:1e:f5:b8:
0a:00:fa:c7:e6:63:d8:00:84:13:56:67:83:73:bb:
8a:f7:2f:5f:c0:40:e2:cf:ab:dc:a8:14:cf:e1:05:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:C4:54:7C:18:87:66:5F:46:5B:0B:9A:10:96:F8:9D:2B:01:48
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:21:bc:52:e8:3a:b5:33:7f:de:a5:d1:bd:67:da:73:cb:45:
2c:2f:82:b2:ab:87:31:e9:17:64:0a:41:d7:7a:cc:4f:d5:c3:
0b:b8:a5:d5:9c:fc:ff:18:21:38:12:38:18:8b:76:ca:34:45:
b5:c4:dc:e5:32:01:ee:84:72:b4:d2:b0:5c:d7:85:79:35:44:
e0:02:12:e1:9d:8e:f7:2a:7a:7d:1d:63:ec:8a:e5:9b:31:16:
08:6d:51:f0:9e:6e:59:b7:42:42:0c:53:4d:9b:fb:3e:45:0c:
0a:9e:13:ec:19:5d:9a:29:89:6d:65:6d:76:26:45:0e:60:61:
e3:86:76:0a:33:38:f4:5d:f1:0a:7d:f2:a7:17:82:50:87:80:
b4:f4:3b:c1:09:9b:5f:25:c0:81:5d:83:26:8b:d4:52:f9:b8:
e6:23:3e:58:db:f7:1b:3a:a5:03:ca:9a:0b:f3:de:da:e4:2d:
09:94:ba:98:a0:21:b1:84:cb:43:84:88:79:cc:e2:cb:07:73:
54:5b:a4:98:d0:9b:37:a7:09:23:21:d5:cd:bd:13:74:45:67:
9a:e2:dd:8e:bc:7b:be:7c:74:bb:b3:4c:1e:22:fd:19:65:84:
2e:cf:88:a9:c6:64:5c:73:8b:c9:3e:e2:78:56:2a:c8:e1:60:
73:77:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:03 2025 by rpki-client