Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: 334ZZ+RCvijQE16ExtV2q1j9jllmy3c5ZmfUTxKx5J4=
Subject key identifier: 4D:25:0B:54:9F:4B:C9:0D:94:30:9E:60:3D:26:47:49:EE:EB:CC:B2
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 019A4E4F95D3552695B29B6F012E2A888D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 06C4
Signing time: Tue 04 Nov 2025 10:00:29 +0000
Manifest this update: Tue 04 Nov 2025 10:00:29 +0000
Manifest next update: Wed 05 Nov 2025 10:00:29 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: 4m+LQiPeUjEzz6DzYE5pCYDSRj5hTZVD3R004Xnz550=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:95:d3:55:26:95:b2:9b:6f:01:2e:2a:88:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Nov 4 10:00:29 2025 GMT
Not After : Nov 5 10:00:29 2025 GMT
Subject: CN=4d250b549f4bc90d94309e603d264749eeebccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:40:a2:23:f1:18:03:e6:31:81:95:b3:a0:
43:9d:aa:38:57:e9:52:b3:8b:e5:1a:58:fa:81:1e:
32:4f:36:08:a2:1a:73:ec:04:23:38:6f:60:ff:04:
41:32:c7:6b:af:3f:77:a6:0e:9f:67:a4:f1:31:d8:
6f:c8:3e:38:03:df:1c:ba:46:3e:9a:2b:94:fb:12:
fe:ad:cd:86:53:a6:7b:98:c9:03:72:0e:ca:9a:39:
0b:c7:c0:f9:7a:44:f2:db:b1:41:48:f0:68:af:d7:
80:43:86:ec:39:42:d5:56:57:f6:ef:43:65:92:f7:
5c:6e:23:d3:96:6f:2e:c0:77:0e:cc:56:c1:f8:01:
01:16:f0:f7:aa:cc:01:4a:f2:d9:f7:94:2f:6e:89:
fd:15:c7:bf:fe:66:d1:bc:d6:7f:fb:c1:b6:71:26:
cf:43:b8:ef:99:6d:cf:1f:a9:cf:a7:66:81:5d:32:
5b:b5:29:fe:c7:78:d6:30:27:86:22:0b:59:9e:31:
85:33:d7:65:b2:bf:d6:a6:0f:cc:1f:b1:02:59:28:
25:57:7c:62:c7:16:53:f0:9e:26:83:fe:07:3d:2d:
eb:46:c0:57:c4:e9:e5:97:ed:25:84:c9:46:2d:2e:
2c:7a:d4:fa:f1:60:f9:ef:13:70:a8:bb:56:a8:f2:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:0B:54:9F:4B:C9:0D:94:30:9E:60:3D:26:47:49:EE:EB:CC:B2
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:37:cb:82:b6:ca:ea:1a:37:31:9f:fa:fc:70:c5:46:9a:
82:9c:ed:f8:78:07:85:2a:55:35:f3:91:a9:56:81:1b:17:2e:
f0:b1:dd:a1:50:37:17:90:95:12:38:3d:aa:bf:01:ec:70:b6:
88:1a:74:74:03:94:b9:e9:b9:d4:36:cc:55:e7:06:cb:d1:c0:
fa:c2:5f:ae:d1:ba:e2:35:2b:e8:8a:00:b5:62:09:d5:1d:66:
b7:0c:a8:9b:fe:fd:df:f5:66:57:12:ed:bb:10:4a:45:11:70:
d2:d3:e5:e8:0f:44:68:80:69:12:a1:3b:8a:2d:10:eb:0d:2a:
31:14:71:3a:df:dd:91:72:de:2f:76:38:e6:30:48:85:d2:8d:
0f:c8:02:6d:62:d3:aa:52:5f:89:e5:db:d1:e5:54:e5:7a:75:
e1:e2:ac:cb:0a:ae:10:dc:fd:f5:e5:49:e6:44:f2:86:3a:4e:
4f:37:f4:09:50:08:93:5a:2d:a9:ff:bb:43:99:30:9c:7a:a8:
d8:03:56:ca:c4:60:6c:8d:04:ec:40:e3:0c:bb:82:e6:c7:ef:
ca:20:41:60:44:24:eb:55:24:3a:71:91:62:ec:7a:84:90:56:
72:83:4e:e8:d0:b6:69:b9:7d:92:07:8d:85:e0:6d:17:65:f7:
00:52:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:41 2025 by rpki-client