Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: nTeWc4/acC2xY7QJXoKS1dCjgaRHiAjx7rRD39kfJ0g=
Subject key identifier: E0:EB:A2:EF:C3:2A:0E:32:E9:E7:32:A8:DF:92:89:A0:78:A7:B8:7F
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 019A71B85D0BC15EDD2233331D8DE7C7A31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0A3A
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: dElWRx2YSmJb9lWJRKaNDSwBq4SrYZ8gotnK6U3NicE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5d:0b:c1:5e:dd:22:33:33:1d:8d:e7:c7:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=e0eba2efc32a0e32e9e732a8df9289a078a7b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:49:d0:61:e2:9b:24:d3:e8:4b:57:b2:2b:
7e:1f:39:fd:0f:57:d9:a6:de:cc:99:00:00:bb:7d:
16:ff:04:48:be:97:d4:bd:35:09:01:47:eb:f3:fc:
b3:40:a1:8a:15:bf:4e:29:44:69:2e:d3:ea:14:32:
16:1f:e5:46:35:9e:e8:fa:b4:41:0d:27:8e:6c:86:
9e:d5:e5:83:1a:93:c1:8a:f1:a8:86:a9:39:bd:5e:
ce:83:d0:b2:ea:49:25:b2:4c:2a:f0:87:4a:df:59:
7d:af:1e:80:d0:a1:22:f9:ba:b3:c8:d2:20:f1:39:
24:58:65:aa:08:01:ec:97:89:c8:12:0b:87:98:97:
78:b9:74:0a:be:0c:88:cd:58:98:5f:fe:e8:b2:e5:
97:c2:d8:f5:f9:e3:6f:c0:d4:a0:a8:00:38:14:1c:
d4:92:75:e8:95:a4:cb:3f:44:9e:03:bb:49:e9:f3:
85:5e:e9:ec:43:e7:0e:95:f2:86:f8:6a:95:fe:a7:
cc:2d:96:5b:e7:53:de:d6:58:39:02:c0:9d:f4:e2:
c8:be:0f:a7:69:4f:b3:c0:24:5f:e8:b5:d4:52:49:
84:a4:52:52:0d:64:6d:ce:55:31:f9:0f:29:21:91:
b1:45:41:b0:1e:e1:32:4f:de:23:00:97:22:19:bc:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:A2:EF:C3:2A:0E:32:E9:E7:32:A8:DF:92:89:A0:78:A7:B8:7F
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8b:22:ef:93:aa:df:69:02:b9:08:6d:5f:2e:76:40:f4:c3:
e8:cb:b2:f8:aa:1f:2f:4d:1a:26:93:d3:a1:f6:88:3b:4a:e8:
fc:d4:39:73:3f:86:46:31:9e:ec:8d:4d:ea:02:3c:08:28:6c:
51:f3:72:35:05:9c:45:a0:3e:66:3b:79:92:a8:dd:d9:c4:56:
df:20:d9:49:c6:02:5d:78:a1:cb:b0:5d:9a:c7:6b:13:4f:eb:
54:14:ec:47:1e:cf:c3:42:c7:d2:bb:ea:17:9f:30:e0:5e:21:
38:38:52:c7:76:10:42:ab:41:3a:67:20:0c:e4:13:4a:5c:e7:
9a:16:cf:c3:1d:d5:71:b8:56:42:cb:51:61:fe:15:2b:b6:81:
d1:32:1f:0d:9e:3d:9d:5f:a5:7e:64:2c:d6:cd:05:b2:d2:90:
3b:af:ab:4c:2b:cd:47:b3:2d:0f:0b:ae:f7:fb:ef:ec:1b:9b:
a2:86:eb:06:d7:97:3e:19:bd:65:e2:07:ee:0f:5b:a9:3f:83:
b5:89:c4:9e:5c:7f:82:01:7b:22:20:51:62:31:ae:e7:88:89:
b8:c2:40:d0:91:79:65:11:5e:3a:c0:24:80:48:8a:10:4e:3f:
43:e9:bc:8c:aa:76:0e:53:99:dd:c9:19:9e:e0:09:e1:e5:6e:
e2:ab:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:29 2025 by rpki-client