Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: sQ5D3q7lTt1+yXXK2FlD4nUBD6ocoOFKfR7CLmHppZQ=
Subject key identifier: 00:58:52:1F:91:A8:20:91:1E:66:25:A2:C5:AA:10:41:14:20:0C:40
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 019A29D511530042790DC361265626A22F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 1702
Signing time: Tue 28 Oct 2025 08:00:20 +0000
Manifest this update: Tue 28 Oct 2025 08:00:20 +0000
Manifest next update: Wed 29 Oct 2025 08:00:20 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: CjjUaZPyO3FU4Y43cYfHMVsBIv623iOBLdpugKOoG1k=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:11:53:00:42:79:0d:c3:61:26:56:26:a2:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Oct 28 08:00:20 2025 GMT
Not After : Oct 29 08:00:20 2025 GMT
Subject: CN=0058521f91a820911e6625a2c5aa104114200c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:1f:39:ff:7f:c6:f8:56:48:b9:87:58:3d:
b3:da:43:bb:a5:7f:74:be:74:c1:5c:d9:fe:ee:44:
72:65:1b:91:c8:05:3d:c2:b4:6c:28:81:fb:f8:27:
51:84:c1:18:e6:b3:2d:a2:ae:b1:f5:9c:c5:2a:66:
0f:97:e2:54:e9:f7:d5:26:8e:9f:91:d9:a6:6d:7b:
c5:a9:3a:a3:25:24:24:9c:67:00:c1:94:4e:43:e5:
32:35:c9:72:c1:9a:40:5b:b1:bf:a6:6a:54:f9:17:
48:c4:16:53:f3:e2:02:1e:1e:d0:e6:b0:a3:59:98:
4e:ea:38:8e:df:8b:51:a5:47:fd:3e:96:c8:dd:dd:
4d:e5:b8:07:67:a4:1e:00:1c:46:9e:49:17:7e:f0:
b3:34:0f:26:ea:bc:3d:96:22:26:ff:8c:c4:26:b7:
88:2e:10:b5:80:aa:10:43:94:fc:43:45:8e:3d:19:
41:47:d6:bb:04:b3:7a:72:49:e6:c2:dd:b2:23:b4:
e7:52:3f:53:f6:17:78:dd:81:4e:ac:96:94:f8:c9:
56:84:e1:79:3b:57:7b:18:15:cd:87:72:72:3c:60:
5e:86:6b:a9:ad:7c:01:ab:a3:cb:64:45:44:98:47:
9f:c9:f0:0c:d7:cf:6e:0a:e7:55:e4:43:8a:92:97:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:58:52:1F:91:A8:20:91:1E:66:25:A2:C5:AA:10:41:14:20:0C:40
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:86:f5:54:77:e3:f8:d4:3c:43:35:da:7b:32:ae:70:95:
dc:81:cf:ba:75:c2:4c:6d:c0:6e:1d:ef:37:ba:9a:c7:0e:bc:
0f:1b:8f:f0:d3:47:ce:4f:23:b0:e9:69:41:22:d9:dd:0c:9b:
0e:d6:75:cc:f8:ee:cf:28:69:68:8c:62:8b:f5:f7:15:10:b6:
d4:bb:49:ea:8c:7a:6e:4b:51:6a:a2:90:2b:54:5c:90:56:d3:
82:16:85:ec:6f:42:79:c0:da:a3:e2:3f:af:68:08:e8:64:7e:
a2:d6:08:ce:6a:0c:90:59:7f:a1:13:7a:6a:20:9d:2e:c5:75:
05:cb:f9:46:dd:0e:5e:61:33:be:37:94:bf:35:08:95:32:f1:
bd:e6:61:53:16:6a:6e:ad:e7:73:6d:fe:bd:c0:08:bd:c1:02:
05:aa:61:98:8a:04:fe:74:38:f2:ee:ba:0f:1d:0f:c6:d8:4d:
31:93:33:c5:98:f3:8f:e8:3c:e3:6f:23:f4:d2:3c:d3:ec:65:
7b:50:6f:f3:f6:6e:92:a0:76:fd:2e:e2:13:d1:18:bb:1c:97:
e0:8c:97:0e:8c:9f:8f:c9:38:7a:fb:71:07:c3:8b:b4:3e:57:
0a:18:e5:20:2a:99:f1:5f:ab:8e:1c:7a:35:07:4c:d7:6b:a1:
c3:5f:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:35:17 2025 by rpki-client