Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File: _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier: pOySdsMHi+D2daq/7rDqDK8n0e8XrUbAVMozsIZ6nKQ=
Subject key identifier: FA:72:D1:5A:0B:A4:6D:26:7B:41:40:CD:B1:A7:4F:5B:90:BD:0B:68
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 019A725C65D6200F12A6F64B184DF586C357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number: 0856
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: KFrROomQMJBnIrzsgZU84yvQLdQ.roa (hash: CshrhqcbJrkLcDCTTw3Y7CjvQ9onI+0d2hk5a/aWW9U=)
2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: 20B92J79hgfCosBZcZr4+2FssYxvl5FL6mR76lrzALo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:65:d6:20:0f:12:a6:f6:4b:18:4d:f5:86:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=fa72d15a0ba46d267b4140cdb1a74f5b90bd0b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:96:98:70:40:85:90:4e:69:26:b9:9a:45:
ec:3e:0c:cd:8f:14:6d:af:30:4a:89:02:dc:35:61:
e0:64:87:8d:80:13:22:fc:a4:cf:2f:ca:9a:8d:ee:
14:7d:90:cf:2e:54:c5:7f:7b:77:83:f8:8d:fd:37:
fd:18:92:1d:58:e5:e7:7d:a7:16:f4:6f:e5:53:38:
46:34:97:d1:65:9b:e9:75:3e:45:6f:ff:b2:31:02:
da:fa:f4:8e:7d:dc:3b:8d:89:f7:a5:c5:60:3b:70:
af:36:c7:67:05:2c:ac:f9:8e:51:4e:15:cf:0d:bd:
40:d5:01:1e:14:94:a3:f3:3a:2b:21:bf:2e:05:a4:
1c:1c:cd:90:d4:12:93:d0:77:3b:cb:2d:90:8a:89:
bd:db:c8:d6:ce:db:e1:4e:42:3b:2b:cf:7c:09:c4:
b8:73:d5:05:41:c9:4d:70:8f:7c:d5:5d:c7:11:42:
60:77:50:47:c0:1e:33:bc:3a:23:12:0d:aa:c8:06:
e5:7a:72:f5:b4:47:01:7e:7b:15:54:f6:cb:65:a7:
86:ac:b5:25:64:2f:08:17:50:eb:4b:dc:27:23:c4:
db:25:aa:4a:ea:a5:fd:51:db:4e:46:60:14:69:bd:
1a:c8:49:7e:18:0e:7a:90:56:06:bc:89:09:7c:7e:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:D1:5A:0B:A4:6D:26:7B:41:40:CD:B1:A7:4F:5B:90:BD:0B:68
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:53:6e:e3:8f:ed:4f:81:3d:13:ad:77:8a:5d:97:6e:c2:
84:c0:d7:35:d5:d6:4a:d2:62:2b:29:49:40:cc:33:0f:d6:5f:
c2:16:5c:88:06:82:9d:43:01:69:80:bf:9b:7a:a3:e7:39:20:
59:1c:aa:05:2e:c9:37:e6:84:fe:6d:0d:5c:ae:86:08:8b:03:
cf:d7:8b:fb:52:d8:7c:02:2b:5c:c7:28:34:cd:54:24:0f:fd:
96:42:32:50:b4:1e:ce:13:1f:ec:bf:cb:4d:73:e9:c1:bf:1a:
e8:ba:99:11:77:29:19:1b:53:b3:45:7a:e8:81:65:c6:bd:76:
06:93:f3:5f:53:58:e7:d7:d6:a2:03:eb:08:14:44:45:54:2b:
02:55:3a:2a:cb:d4:19:f7:dd:7b:96:23:9c:2f:da:1f:b9:8d:
20:25:c6:0c:a9:27:c8:dc:6c:1a:a7:fc:43:b6:13:fa:d6:9e:
d8:d5:1b:36:a4:9f:47:9a:37:35:d6:ce:f4:02:24:26:0b:53:
12:6f:c2:70:04:61:55:24:22:3d:6a:ea:24:a2:aa:3e:1a:26:
28:55:f3:5c:5e:dd:de:6d:84:df:cd:9e:b4:c0:61:33:67:16:
2e:93:9f:0b:00:17:0c:c6:a1:4d:60:e3:77:79:18:2c:7a:03:
0a:40:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client