Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: bYb4KhDxpWekYchhNvP70ADcNmgVhBGXCkwioKaSZ24=
Subject key identifier: BF:84:0E:B4:69:CB:8B:E8:2D:55:54:1B:29:85:F1:ED:38:32:97:2A
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019A239C57F39954577F0E665EC4A809D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0287
Signing time: Mon 27 Oct 2025 03:00:39 +0000
Manifest this update: Mon 27 Oct 2025 03:00:39 +0000
Manifest next update: Tue 28 Oct 2025 03:00:39 +0000
Files and hashes: 1: BJ7sjp5ibHEtMZwGH8QOSgEVeks.roa (hash: vdUAgWFb0/ninRNnqapYY+qZwNPE4UbocwPx101zVCg=)
2: JyAstjJnRnfKpE7boFngTUQKsSI.roa (hash: QeCPc7sTPqsvq1vdnmx1h5/hFMLBuSHfMUEgszAKgAc=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: GaSRpOoNrSMertwGvAlyXJt+xzSNa2fvLBP5NLmal2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:57:f3:99:54:57:7f:0e:66:5e:c4:a8:09:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Oct 27 03:00:39 2025 GMT
Not After : Oct 28 03:00:39 2025 GMT
Subject: CN=bf840eb469cb8be82d55541b2985f1ed3832972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:60:03:ee:fa:fa:82:14:7c:f9:bc:a2:94:
4a:81:ee:ed:fb:2e:68:eb:50:bf:fe:a8:f2:63:bd:
53:94:94:0f:43:65:d8:f2:0e:20:62:9d:72:b5:7f:
73:a0:71:c1:bc:a0:54:84:19:fc:09:8c:a4:3f:75:
f9:41:4d:98:3c:1c:02:24:e2:3c:b8:78:43:00:22:
ac:cc:d4:a0:8b:fd:db:28:1c:9a:c8:80:30:7f:2e:
f3:3f:f9:a7:8a:c7:bb:9e:82:0e:6f:ef:dd:55:e7:
df:f2:96:2c:2a:98:aa:25:41:3d:08:0b:3a:3c:29:
da:38:58:78:16:2c:ef:60:50:7c:05:ef:64:b6:2b:
25:f5:39:db:33:ee:34:50:24:2e:b5:d6:f0:37:73:
05:88:19:df:3e:8d:61:5f:5e:c7:c9:e3:17:65:e4:
d4:80:54:1b:5f:3d:88:1e:91:2e:86:27:d3:4b:fd:
89:40:ff:fb:17:68:bf:83:35:34:d7:90:0e:06:c2:
77:9a:24:66:d2:a7:69:8c:b4:7e:8b:9f:a9:00:1a:
14:92:3c:d8:31:96:19:d4:56:ed:dc:b9:e4:0e:97:
03:19:18:2d:61:fa:0f:4f:98:16:b8:bb:a2:ef:f0:
c0:d2:70:2b:d8:c2:fa:6e:33:59:4a:d1:07:ed:a2:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:0E:B4:69:CB:8B:E8:2D:55:54:1B:29:85:F1:ED:38:32:97:2A
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:16:ff:a8:66:65:29:04:c5:be:a8:11:89:1a:5d:8a:b7:
6a:24:a7:44:23:f7:6a:cc:3e:e8:20:53:0d:65:39:27:50:03:
55:62:ec:42:4b:b8:c8:07:27:dd:ea:f1:be:d9:ed:dd:3f:fc:
7f:08:e9:2c:c4:46:8c:54:7b:c2:28:a4:7b:25:d1:df:2f:a4:
e0:cf:26:be:9f:69:27:e9:9f:b6:1c:25:3e:bc:7d:5e:78:e8:
50:f0:92:9b:68:54:15:fc:f7:d8:23:f0:a4:4d:38:f0:77:cc:
db:79:81:a8:df:cf:cf:5b:d4:98:21:c8:6c:41:97:c7:7d:ff:
a8:b1:63:a2:8e:8d:96:c0:e7:10:19:86:26:35:58:f4:ee:4a:
e4:1b:fd:7b:ed:0f:73:d8:1c:70:aa:28:ba:a6:9a:0c:a8:cd:
27:d0:ed:c0:83:c0:2b:4d:31:0b:b6:64:ed:76:96:5f:62:09:
e1:6a:5f:90:8b:e7:8c:51:79:44:10:81:4c:c0:fa:24:c2:43:
cb:ae:cd:3a:d3:7a:e3:dc:66:5d:0f:37:96:a8:53:12:35:11:
32:b4:ec:97:84:2f:47:a7:b4:e0:66:cb:09:25:2e:34:b5:5c:
68:da:bd:de:d7:02:59:0c:e3:3e:e0:5e:dd:83:f5:49:14:e4:
4b:7e:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:48 2025 by rpki-client