Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: A167nLdjfOpWHjL7YOi1rf7R6szIG5U5ykGYrG3penI=
Subject key identifier: 87:9B:00:75:8C:8F:49:63:17:56:16:82:ED:A9:A2:1C:46:48:8A:77
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019A4EBD41F9BB450DD8B8D6CA8A47CF0DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0414
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 7pD5JpqAewHXaiRClvIzfkjwMJswrIB16mdaepwkzCw=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:f9:bb:45:0d:d8:b8:d6:ca:8a:47:cf:0d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=879b00758c8f496317561682eda9a21c46488a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:5f:0d:6d:71:88:3a:db:89:4b:60:06:dd:
4c:a4:9c:d2:69:0b:84:a2:53:1d:5d:f7:6f:bb:77:
1c:cc:0e:8e:b1:43:45:a4:a2:bb:60:d3:a5:e5:2b:
f2:60:a1:d8:69:d4:00:37:d0:4e:d8:98:3e:f0:48:
31:76:cd:6f:97:35:51:19:70:cd:8f:71:f9:5e:ff:
6e:15:17:0f:1e:50:21:cf:85:ee:80:30:31:1b:f7:
20:d6:61:9f:5a:82:1b:e9:5f:e3:08:70:ed:5a:9b:
83:4d:ba:4b:6c:a1:a6:f4:55:56:26:77:2c:d4:27:
f8:c0:cd:ae:a8:6c:38:b9:66:57:d6:46:d6:83:ac:
83:c2:c8:1b:c0:26:d1:d8:79:ea:28:c7:81:77:22:
ae:51:d4:a5:01:bf:08:58:a9:65:04:d6:2d:27:c6:
d3:62:eb:89:9f:48:3a:5e:62:ff:43:16:3b:de:84:
96:50:6c:a3:91:da:76:70:0a:44:64:d6:61:78:06:
21:87:df:ee:87:e7:47:c6:6b:8c:18:26:e7:2b:52:
6f:5c:a4:8c:4e:7a:3b:8c:86:fb:f5:e6:0b:d9:31:
c8:3d:f6:fb:e3:2e:3a:03:ac:a1:c8:c4:ae:aa:aa:
6c:5a:08:8f:c0:b4:89:c6:46:3a:44:44:b1:9a:b2:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:00:75:8C:8F:49:63:17:56:16:82:ED:A9:A2:1C:46:48:8A:77
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:a7:c4:3b:d4:36:07:7d:17:84:98:08:0c:1a:2c:40:52:
f6:80:b6:5f:a4:66:3f:f0:00:e2:90:e4:58:70:2d:e2:ca:0d:
ba:fa:2d:e8:48:ad:54:5a:10:97:ac:66:a3:f4:d4:ca:6c:c9:
24:ec:f5:4d:3f:41:f9:bf:57:3e:87:11:e7:5e:63:b7:84:e2:
07:a7:e9:e8:30:4d:fd:1c:a6:97:70:f8:87:51:6f:fa:ed:75:
44:0a:56:e5:aa:d5:dd:30:27:1d:f1:15:7f:43:2f:65:df:1f:
ee:6a:d3:b5:e3:15:7e:a8:5b:e4:1d:84:81:e7:e9:cd:2f:59:
78:4f:0e:84:9b:ee:91:63:5b:a0:0d:48:5a:d6:01:ca:4f:65:
96:23:4e:b2:15:ec:9f:f0:b7:b5:03:f2:2b:4d:e9:4e:9b:5d:
7b:e0:61:07:93:4a:df:cb:65:e7:66:77:02:d1:f0:2f:d1:6b:
95:55:96:f7:81:9c:26:a5:23:5d:5d:68:53:a6:b8:4e:40:25:
ad:43:2e:f1:ba:2b:c9:54:3e:bd:71:cb:da:01:b1:b5:94:01:
2c:eb:d4:7b:a1:42:6e:43:13:7a:76:d3:a4:01:f5:b4:9a:15:
84:8e:f1:40:e6:53:c4:69:db:61:49:0f:fb:94:fb:4d:ee:69:
82:4f:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:29 2025 by rpki-client