Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File: FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier: OByawwYbMoapVltVhsRez8ZE+Vz1sxHUIyMUzqgezJ8=
Subject key identifier: 75:38:44:C9:B0:70:EE:1D:D0:C5:3B:5F:99:8F:A7:2B:99:34:8F:65
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial: 019A4DE1C3BB38EFA0636E0466E130CB4AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number: 1603
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: d0cT21ONA6Plq0p9NqV2/Rsecjxt8R17mWfKQe1ng1M=)
2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c3:bb:38:ef:a0:63:6e:04:66:e1:30:cb:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=753844c9b070ee1dd0c53b5f998fa72b99348f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:37:37:0d:ef:71:28:3a:e4:0c:df:cd:a4:
9e:ec:a7:78:55:8b:b5:9f:71:7e:0c:4b:76:58:62:
be:c1:ab:05:fa:8f:50:d2:85:ca:60:a6:bc:76:e7:
15:5b:85:b3:3c:99:ea:39:b6:fc:29:c7:39:bb:62:
38:7b:db:6c:08:75:30:32:37:d2:7e:97:57:17:5c:
e7:62:92:3f:ec:98:4e:b5:61:72:76:05:28:6d:0f:
65:ff:b2:da:bd:bb:7d:d4:7c:4e:cc:1d:0b:6c:b6:
2f:87:ca:fe:35:b1:f8:8c:32:e7:94:5c:d0:9b:0a:
32:5d:5e:f6:50:72:30:c2:9c:90:d1:d5:86:41:92:
9f:91:8f:0a:8a:15:67:95:c4:77:e3:2a:e1:ce:f5:
06:85:46:11:36:a2:78:e4:a9:8a:63:db:fc:fe:19:
98:3e:fd:fd:c8:a7:31:15:cd:90:85:7b:9f:f4:85:
b5:fc:28:b4:db:ca:3a:b0:10:27:b4:e2:9d:27:a2:
f7:86:0f:e6:17:5d:f8:6e:ea:d1:52:f7:94:07:ae:
d1:01:be:52:f7:2f:a4:b8:61:90:0e:a7:08:e4:90:
f9:2b:ec:4a:59:de:e2:00:bb:32:89:c6:15:75:87:
14:42:36:82:d8:a2:72:30:0a:32:ad:95:cd:ff:27:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:44:C9:B0:70:EE:1D:D0:C5:3B:5F:99:8F:A7:2B:99:34:8F:65
X509v3 Authority Key Identifier:
keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:ba:e8:44:99:8e:80:88:d7:73:d6:56:53:7c:89:05:83:
bc:f5:73:5f:0c:e0:1d:4d:e5:96:a5:93:72:ea:63:69:c6:00:
40:16:89:fd:af:87:80:62:47:74:15:a4:48:9f:08:fc:5c:b8:
c7:80:c4:80:3a:ab:e5:88:a4:a2:ee:1a:b0:55:a2:ed:63:c3:
94:d6:88:0c:df:29:62:7b:9f:e2:4f:5d:96:43:00:fc:7d:f4:
43:77:dc:ff:d6:1c:43:36:f9:a7:0e:ae:ba:02:ac:6f:3e:ab:
dd:c2:27:ff:e9:f3:c0:f6:4a:52:71:ce:c0:58:8a:5e:3d:82:
fb:43:2b:ff:34:cd:49:94:34:40:02:79:b6:8f:c8:78:9e:35:
f6:5a:bc:ce:6c:cb:85:c6:dd:fd:f4:2e:8b:a9:5c:60:6d:cf:
dc:d1:c8:92:3d:7d:01:41:38:52:27:c8:f4:62:40:b7:d1:fa:
10:66:f7:2c:cb:03:61:3c:88:c7:7a:11:6d:c2:5f:82:44:08:
20:e5:cd:0f:5c:13:03:96:ff:eb:bf:3e:89:5b:ba:aa:db:40:
cf:7f:25:1c:7e:90:d5:e3:7c:75:a3:3d:93:39:ad:11:b4:8b:
4f:c6:55:24:a0:06:af:3d:cb:f9:c0:cf:5a:bf:e9:1f:25:ce:
87:cb:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:25 2025 by rpki-client