Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: 5uiaMK3KD9syQsKH+Renw0pbNJ3kDKqPKfG4DmdHdGM=
Subject key identifier: 9D:62:4F:6D:38:1F:08:94:0F:FC:9E:FA:C7:7C:7E:0C:34:97:F3:16
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 019A4D7473924A6F1D6C9CC234C1F069ABC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0B9A
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: bTst1F92UKAOMkt7Jd22qMjvGmx5FNWLmw+Ch4xwIyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:73:92:4a:6f:1d:6c:9c:c2:34:c1:f0:69:ab:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=9d624f6d381f08940ffc9efac77c7e0c3497f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:c3:cc:eb:ac:c6:a9:49:1d:a4:1a:63:df:
ad:6f:34:ae:fd:b8:38:91:03:ad:14:0f:a8:cd:ff:
2f:48:05:5c:60:7f:5c:e2:a8:1b:51:19:37:a4:06:
0e:84:e1:35:7d:b3:51:de:de:58:3c:94:4d:50:64:
d2:76:e0:3c:e5:ce:d6:76:bb:8b:ac:3a:3f:40:ea:
f9:8a:29:42:71:24:4f:47:f3:58:9a:a0:7d:d6:d2:
06:37:5d:4a:8a:89:61:8b:08:67:38:e7:3d:d5:fc:
f8:bb:14:e2:da:2f:78:ec:8f:8e:3c:7c:af:c0:a5:
53:da:de:d6:c1:72:b6:20:2a:9d:24:fc:a2:cc:a2:
16:6a:34:ba:3e:9e:14:60:74:ec:54:3d:e1:5d:22:
d0:64:64:c8:ab:59:d3:0c:9d:3b:03:9b:4f:91:6c:
4f:3d:bf:08:c4:04:aa:4b:2f:b2:fc:90:36:0a:ef:
e1:24:2a:ba:fd:5e:56:99:b2:a3:b8:42:e8:2c:24:
4d:f6:2f:0b:f7:e2:8e:79:2b:bb:64:89:46:cd:f4:
be:50:d8:cd:87:e5:40:53:45:a9:28:b3:7f:33:de:
38:c8:47:72:12:98:5a:e4:52:cf:14:5a:d8:e3:06:
b9:c3:7c:f4:dc:56:c7:08:6d:0c:73:b0:b7:8b:a4:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:4F:6D:38:1F:08:94:0F:FC:9E:FA:C7:7C:7E:0C:34:97:F3:16
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:21:c9:dc:58:79:68:9c:2b:97:94:84:9a:01:38:1f:83:29:
8d:6d:6b:5b:44:c2:68:3f:9a:93:7c:60:74:88:02:9e:4e:13:
16:0b:31:45:c7:7f:61:dc:3f:8b:40:b3:94:81:51:e9:30:43:
dd:f3:7e:cf:d3:9d:99:43:67:18:12:cd:cd:95:f3:ab:d5:b6:
7c:fc:ad:3d:a4:ed:66:df:f1:3a:ec:3f:34:21:7e:d2:b6:69:
7e:e9:9d:8a:67:83:e4:9d:f3:72:c5:62:83:78:d3:d4:84:e4:
0a:29:5c:f8:4e:71:0c:89:55:a5:d8:51:a1:25:61:4c:d2:8b:
91:7e:e1:7c:f8:3e:78:65:5e:58:55:f2:71:f9:10:0b:b4:84:
7c:a7:be:8b:da:20:4e:52:2e:06:d5:95:60:fa:6f:36:ce:3b:
a2:f5:be:0e:8e:94:be:12:46:78:40:1b:6a:75:98:e1:86:91:
64:7e:26:91:c9:2f:7a:84:9f:5c:4a:07:f5:95:61:e0:25:3b:
8d:96:e5:c8:9c:6a:ef:20:42:ce:3a:20:70:b8:b9:71:31:88:
21:e3:a0:f8:9e:75:82:6d:6a:12:d2:1c:c9:07:60:d5:d0:15:
cc:b2:7f:ac:3e:b3:22:b8:7f:46:cc:5f:57:57:d5:c9:49:30:
e6:d6:9f:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHOSSm8dbJzCNMHwaavBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx
MjE5ZGIwHhcNMjUxMTA0MDYwMTA4WhcNMjUxMTA1MDYwMTA4WjAzMTEwLwYDVQQD
Eyg5ZDYyNGY2ZDM4MWYwODk0MGZmYzllZmFjNzdjN2UwYzM0OTdmMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA493DzOusxqlJHaQaY9+tbzSu/bg4
kQOtFA+ozf8vSAVcYH9c4qgbURk3pAYOhOE1fbNR3t5YPJRNUGTSduA85c7WdruL
rDo/QOr5iilCcSRPR/NYmqB91tIGN11KiolhiwhnOOc91fz4uxTi2i947I+OPHyv
wKVT2t7WwXK2ICqdJPyizKIWajS6Pp4UYHTsVD3hXSLQZGTIq1nTDJ07A5tPkWxP
Pb8IxASqSy+y/JA2Cu/hJCq6/V5WmbKjuELoLCRN9i8L9+KOeSu7ZIlGzfS+UNjN
h+VAU0WpKLN/M944yEdyEpha5FLPFFrY4wa5w3z03FbHCG0Mc7C3i6RWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1iT204HwiUD/ye+sd8fgw0l/MWMB8GA1UdIwQY
MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt
YzY1MGM3NmQwOGNlLzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl
LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCHJ3Fh5
aJwrl5SEmgE4H4MpjW1rW0TCaD+ak3xgdIgCnk4TFgsxRcd/Ydw/i0CzlIFR6TBD
3fN+z9OdmUNnGBLNzZXzq9W2fPytPaTtZt/xOuw/NCF+0rZpfumdimeD5J3zcsVi
g3jT1ITkCilc+E5xDIlVpdhRoSVhTNKLkX7hfPg+eGVeWFXycfkQC7SEfKe+i9og
TlIuBtWVYPpvNs47ovW+Do6UvhJGeEAbanWY4YaRZH4mkckveoSfXEoH9ZVh4CU7
jZblyJxq7yBCzjogcLi5cTGIIeOg+J51gm1qEtIcyQdg1dAVzLJ/rD6zIrh/Rsxf
V1fVyUkw5tafng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:33 2025 by rpki-client