Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: 3c7geXJspvYcen8QasOZviQzXwgXYAnz3lGbjFTJs74=
Subject key identifier: 62:8E:8A:8D:AD:CE:03:93:5F:3B:02:B8:8A:9C:9B:EE:74:56:1A:E8
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019A4B85C184ED30571D6D2AC2F192B797E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0E6A
Signing time: Mon 03 Nov 2025 21:00:48 +0000
Manifest this update: Mon 03 Nov 2025 21:00:48 +0000
Manifest next update: Tue 04 Nov 2025 21:00:48 +0000
Files and hashes: 1: cB6_dqDkGm0horqNuxQyDYUnIqU.roa (hash: q3CLYq9eWKAdWNRwww5i4XqHOK10EWh8bmYx4jG625g=)
2: dvkQi7LJcacPEnavAtPM4pCT8P4.roa (hash: yFRSaO/fFZoaoBkddBRpfu8JA7wvlMaSX8s3o33YjCY=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: Ylxcbpt7a8KLnVfMw//yWsqiOZOcImRiRQ34Aqmvbvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:c1:84:ed:30:57:1d:6d:2a:c2:f1:92:b7:97:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Nov 3 21:00:48 2025 GMT
Not After : Nov 4 21:00:48 2025 GMT
Subject: CN=628e8a8dadce03935f3b02b88a9c9bee74561ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:4b:7c:8a:2d:8f:2d:ad:90:96:f6:08:c6:
b3:89:14:70:27:78:e5:31:7d:a8:78:8f:ca:32:84:
d2:2a:11:84:1a:f5:a3:3a:b3:d5:39:59:bd:2a:72:
58:81:40:6b:c6:38:b6:e6:a4:f7:1b:41:77:85:43:
2a:2a:05:11:d9:cd:fc:c9:4c:48:0d:f9:af:fa:4a:
7a:9b:ae:98:08:b0:50:85:05:ae:77:7a:b6:64:58:
ff:7e:f2:31:6f:2f:82:51:42:70:fd:38:20:92:83:
b9:a2:76:80:ca:49:f5:5a:79:80:76:97:a2:97:e6:
1c:1c:94:dd:df:f8:0e:cb:a9:4d:2e:26:80:f2:eb:
8c:a2:ce:21:bc:c9:9c:ea:ac:4e:f5:f8:b3:a1:e9:
b8:6a:71:0e:a6:cd:98:03:77:72:19:01:85:33:76:
38:8d:15:85:bb:21:89:d3:b2:88:63:20:47:aa:24:
9e:cc:29:b7:79:0e:64:a0:0a:46:ec:68:c0:63:a8:
95:1d:29:8e:1f:30:ec:e9:31:46:ad:48:80:20:4f:
28:a2:a8:6c:23:ab:37:15:56:33:8b:a2:d8:c7:1d:
c4:92:52:29:72:44:53:67:0e:7f:df:42:da:cf:59:
c6:df:21:3e:68:15:be:4f:0d:36:3f:5c:97:8e:54:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:8A:8D:AD:CE:03:93:5F:3B:02:B8:8A:9C:9B:EE:74:56:1A:E8
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c7:e7:a3:f9:8c:5a:98:fb:0a:08:bf:86:cd:98:e1:d3:2b:
db:69:bc:24:e5:9e:ed:4f:1a:09:3d:c7:cc:f0:55:52:bf:db:
87:85:67:57:41:c8:09:f8:91:55:0e:31:7e:e6:04:4c:d1:7d:
35:98:57:97:b1:14:6c:3b:1c:94:b0:67:e7:bc:22:18:67:57:
52:d3:ae:85:28:73:1e:17:ad:31:81:57:16:e3:9c:6a:51:d1:
7d:2f:ba:53:00:f2:59:62:d8:94:3c:d3:bc:43:7d:a3:fc:76:
80:34:c9:d5:8b:b8:f8:18:a0:5b:6a:cd:7b:11:88:19:9e:64:
89:9c:35:80:b9:71:93:f4:19:3a:03:0d:80:e2:48:48:de:35:
49:35:83:a6:0d:dc:23:75:22:ac:fb:ee:b6:06:e9:4b:b3:66:
6c:dc:3f:d1:6f:c5:be:82:a7:e3:fe:b4:e8:22:32:50:97:74:
22:7e:a2:0e:85:6e:8e:ae:70:1e:64:0c:3e:5d:d7:d0:02:c8:
0e:de:a5:6d:4b:ef:12:d3:47:39:9b:fa:dc:8a:68:20:c7:51:
ed:a4:f2:44:67:1a:0c:19:eb:74:6e:30:20:fb:55:45:ea:59:
de:3c:21:6b:80:33:62:19:24:d5:e8:41:96:47:42:8a:a8:bb:
b2:bc:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:02:34 2025 by rpki-client