Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: sQBH5mZhudF+gRoWiVgSOPlkwE99eRODcG2em/IWrEI=
Subject key identifier: 06:DD:6B:B6:D2:C9:51:6F:F2:43:C9:AF:00:A6:9F:78:8B:11:87:13
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019A52D22A98795B0DA88B308256E326AA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 15EA
Signing time: Wed 05 Nov 2025 07:01:36 +0000
Manifest this update: Wed 05 Nov 2025 07:01:36 +0000
Manifest next update: Thu 06 Nov 2025 07:01:36 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: BdUG/YQ+rqLOUiyRR7MqiZpyKDcRbysZTZNzV0FH5Kg=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:2a:98:79:5b:0d:a8:8b:30:82:56:e3:26:aa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Nov 5 07:01:36 2025 GMT
Not After : Nov 6 07:01:36 2025 GMT
Subject: CN=06dd6bb6d2c9516ff243c9af00a69f788b118713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:cf:69:69:50:5c:35:77:18:cc:f3:f7:25:
8a:a1:b0:7e:6e:ee:52:19:70:d0:bb:ef:b0:af:ef:
a8:02:d5:29:f4:b0:e4:0d:9b:e7:f8:5d:d3:96:13:
80:5d:10:0d:b6:0c:56:3b:98:ab:5f:9c:bb:35:4f:
a2:9b:e1:93:b0:fd:06:92:ee:84:8e:88:b5:c2:9e:
d3:2d:eb:34:be:01:1b:d0:c7:f4:38:83:08:56:5e:
5f:cd:b4:97:cb:c6:a9:1d:cf:e9:d0:2c:11:4b:32:
06:5e:99:b2:8d:63:20:5f:0e:a9:db:26:80:3c:a0:
92:73:5e:be:92:21:96:12:51:60:1c:6e:11:ca:64:
90:26:e8:41:ba:f4:74:ab:db:39:c2:dd:e9:09:99:
52:0b:ea:99:5f:9c:04:c4:a1:da:c4:d7:67:c0:e0:
f8:74:19:61:26:ef:be:e7:73:94:28:64:d3:ce:ed:
93:b5:dc:41:60:64:4f:3c:a3:7b:c5:83:c7:e6:1e:
a1:49:36:ce:ce:e5:da:4c:e2:da:f9:a5:b1:96:e2:
76:c6:1d:ba:2d:cb:2b:ed:d5:40:c6:87:e4:20:a4:
2f:65:26:8e:35:a9:4c:b1:b0:16:46:fa:d9:7d:10:
48:3b:6a:21:54:91:6b:9a:e4:5e:d9:ac:4a:e7:b3:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:6B:B6:D2:C9:51:6F:F2:43:C9:AF:00:A6:9F:78:8B:11:87:13
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3e:cf:60:fc:fa:62:05:aa:36:b5:d6:b5:e2:73:18:fb:12:
5a:e9:33:c7:48:3d:00:89:c3:b8:b6:b2:b6:9b:89:af:bd:af:
a1:1e:dd:ab:0e:2d:d4:d6:ce:d8:5e:62:24:82:4a:7a:25:c9:
e4:fb:83:a6:3f:bb:03:ce:91:31:57:aa:3f:a3:10:15:6c:7b:
ab:24:aa:fc:0b:ca:ae:ee:0d:cc:a2:cc:42:a1:8f:a7:63:28:
9a:75:32:c9:0b:ab:d8:e7:e4:cc:59:39:dc:21:d7:7f:45:a4:
8e:36:98:38:ad:dd:91:3d:50:75:44:cc:1f:fe:ae:5d:71:7f:
f5:5b:95:04:18:e5:8f:a3:45:54:52:3a:9b:b3:95:dd:e0:bc:
b9:66:89:65:52:26:ee:86:43:43:43:72:d8:a1:62:05:8e:bc:
bd:41:0f:fc:41:00:cf:e2:58:89:52:82:fd:f4:30:ab:63:76:
99:99:91:3a:1f:dd:ec:87:b6:3a:3e:0b:ec:73:cc:9d:0b:2c:
2a:7d:e2:a1:71:1f:e9:50:a9:d0:e3:0e:ba:1c:ce:bf:27:f6:
18:8a:f4:8e:ab:5d:d9:17:a4:c2:42:69:46:41:a7:21:2f:40:
0a:b0:34:16:f0:e7:23:1f:5a:29:8e:bd:84:47:4a:2a:5a:2a:
22:c2:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:23:13 2025 by rpki-client