Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: 9WBdepXwR/FfChOGJ+Gf77tFmXcGwmFQnfPzS1nBPv0=
Subject key identifier: 4C:A8:A0:53:55:C5:AC:BF:CA:BC:2A:C2:76:CF:43:11:F1:21:D3:8B
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019A2A7A20D4A291249957ABE1C49C611337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0786
Signing time: Tue 28 Oct 2025 11:00:37 +0000
Manifest this update: Tue 28 Oct 2025 11:00:37 +0000
Manifest next update: Wed 29 Oct 2025 11:00:37 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: GNj0bg8seLstfUwp6e5/YlaVAuZbIhMkvO5EK67wsYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:20:d4:a2:91:24:99:57:ab:e1:c4:9c:61:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Oct 28 11:00:37 2025 GMT
Not After : Oct 29 11:00:37 2025 GMT
Subject: CN=4ca8a05355c5acbfcabc2ac276cf4311f121d38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:d5:be:19:35:e7:63:e3:8a:33:aa:d8:d1:
d7:1d:12:cd:0d:ee:5d:a4:da:77:f4:5e:85:59:35:
c3:9d:2d:7a:1b:e4:e0:f2:5f:64:01:f5:98:62:93:
67:da:8e:69:e8:ee:c6:23:97:cd:0b:48:8c:f8:c1:
66:4d:54:88:9d:9e:e6:51:29:ba:45:61:d0:6a:85:
fe:60:4a:f9:d5:08:c2:fe:6a:0a:ed:ad:a2:69:2c:
06:6b:49:c9:9a:b4:31:a5:1c:83:6e:18:99:3b:82:
9d:40:e9:62:c6:17:da:56:01:33:a8:c4:d3:e9:c1:
8e:a1:c9:ab:37:6c:57:33:5b:fc:02:2a:2b:fe:4a:
0a:06:cd:db:85:fc:51:47:41:ea:00:ae:1f:74:00:
74:1e:08:aa:b0:7a:d5:f0:d9:e1:57:d8:b6:f4:07:
4a:75:a2:ca:6f:17:96:88:ac:28:f1:29:51:31:d2:
b4:47:0f:2d:23:b9:1d:6f:13:2a:18:5a:79:37:f9:
98:c7:f4:09:a7:8d:87:47:8d:f9:7b:76:f3:45:7e:
b9:37:67:7b:28:03:aa:74:b8:44:07:43:1c:53:c0:
3a:c7:bc:bf:94:2f:1e:85:75:ba:9a:4d:2b:48:ca:
b3:54:7e:8c:30:30:90:48:d0:fa:e1:7f:9c:65:87:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:A0:53:55:C5:AC:BF:CA:BC:2A:C2:76:CF:43:11:F1:21:D3:8B
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:46:f2:64:fd:fd:88:20:f6:99:73:55:ad:90:8d:bd:d3:
f3:1f:5a:31:b1:8e:51:ef:5b:ec:ba:b8:d9:ed:0e:b1:2c:ea:
45:7b:c5:a9:ee:3f:b3:fa:18:40:92:c2:15:8c:20:f2:4b:20:
9e:41:43:a1:7e:01:6f:f7:71:2e:0c:e8:71:39:7b:6b:ae:60:
a9:8c:b7:58:32:db:9f:03:70:b6:20:9e:9b:35:bb:07:36:0d:
22:96:20:f5:23:29:88:5a:22:9a:6f:ef:48:31:cd:f4:1c:c6:
b4:83:66:86:fd:a5:de:a5:68:08:12:c3:2a:40:8e:69:52:26:
42:51:be:5f:7f:2d:3a:2c:db:3c:18:a0:9e:7e:3a:72:08:41:
e6:71:11:30:6e:0a:85:8e:2a:61:bc:a6:b3:fc:99:f5:c3:37:
62:90:c1:2a:bd:51:32:98:60:c8:e6:15:c0:6e:de:fa:aa:df:
20:95:48:f0:f8:83:64:19:b5:b7:16:44:d5:0f:e5:35:3b:35:
4a:a5:c7:e3:a7:c2:72:d1:be:e7:fe:9f:31:a6:ac:61:4f:98:
17:06:ce:c7:d1:26:db:35:23:24:d6:d9:24:9a:53:4e:c3:db:
3a:e6:ac:d4:49:89:cc:1e:f3:36:5b:49:02:2d:b3:99:e4:04:
d1:aa:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:19:01 2025 by rpki-client