Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: QPYnNS6UndW/kc9Tsl0o4RJtir/JhZGtYo4oAbd1+Z4=
Subject key identifier: 54:3E:CA:BB:0A:4F:D7:00:31:1E:EE:CB:3F:10:A7:78:91:54:6C:E7
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019A722621E2E046233480E06AE13FBF7E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 101F
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: NbeQZEoAcWZ0Q7cf88/DEmzfDiQGiky+g9x9dPtmgG0=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:21:e2:e0:46:23:34:80:e0:6a:e1:3f:bf:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=543ecabb0a4fd700311eeecb3f10a77891546ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:7d:6b:57:f1:ba:d2:33:2a:d9:f9:1e:29:
fb:07:58:f9:5d:44:94:66:30:f2:8d:ad:8b:2e:7e:
81:f6:87:a4:a8:45:0d:b2:cc:9a:1a:d4:fb:51:a4:
98:c3:5f:fc:06:3d:2e:a2:00:4e:d5:51:ab:13:25:
6a:78:36:d6:6f:e6:11:5f:e0:2f:06:6d:a2:7b:cd:
42:61:1f:8d:92:f8:2d:2b:ff:55:79:26:cc:43:ce:
33:af:70:b0:29:98:9f:95:8f:ce:e9:31:ee:00:22:
a6:60:57:e0:80:61:5c:26:97:cf:bc:29:91:e3:d6:
f8:8c:56:f1:d6:c2:bd:ff:6d:7b:68:13:a3:52:a5:
70:87:21:6c:6f:06:62:24:6c:03:3e:31:b2:bb:03:
4e:6e:da:71:fc:37:53:5a:f0:84:d6:cd:87:2a:48:
29:12:30:6c:d7:ab:e2:9c:99:95:4d:61:cf:4e:f8:
03:96:cd:1b:17:ad:b4:ac:c5:63:5d:a8:4a:f8:a5:
4c:51:8e:30:c4:79:24:8e:2f:f1:78:f9:a8:60:76:
1e:8a:5d:b5:59:0f:71:56:2d:52:df:d2:f5:05:6d:
fa:7e:e3:f4:29:fb:59:66:e2:6d:f7:5f:1c:ac:64:
23:8a:7d:f8:fd:c0:80:f8:ca:b6:2b:40:52:bc:6c:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:CA:BB:0A:4F:D7:00:31:1E:EE:CB:3F:10:A7:78:91:54:6C:E7
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:96:60:e4:3b:7f:a5:31:61:67:44:3d:ab:2f:c8:f4:69:
f7:4a:0b:1a:35:46:f2:21:e0:bd:37:0a:0a:9b:c4:06:70:91:
b6:68:34:ee:7f:d4:52:cb:3c:21:7e:5a:e7:93:52:44:b6:4a:
7f:9f:c8:c5:ec:97:13:71:b3:d6:6c:43:ab:0c:14:95:f7:7c:
ff:26:ff:d0:e6:a8:1a:9b:66:3a:fc:98:16:bc:fc:18:ec:c5:
5c:fd:d3:5d:17:65:4c:92:4a:71:ec:09:71:27:f3:ce:39:3a:
9b:c4:a5:e2:e9:52:4a:f2:80:cd:51:08:09:6f:38:8c:98:e4:
6f:e2:49:f3:78:9e:c7:71:7b:ca:b9:ae:99:60:f7:70:07:5d:
43:2f:8d:7d:4f:ca:e5:fc:0a:f9:9a:46:80:4d:9f:ba:66:39:
b1:a0:b2:51:83:e2:ba:a8:bd:7e:df:a1:0b:c5:b7:26:89:c3:
95:cd:45:80:78:7e:e8:5f:79:fa:6b:69:ba:9d:ff:89:49:b4:
05:18:68:6e:c6:07:95:98:34:9d:f7:d4:ed:38:b1:4e:37:30:
12:a8:aa:9b:43:25:3d:a0:46:db:f9:25:4b:bf:3f:11:ba:e7:
74:f4:d5:bd:70:4f:f9:d6:2e:60:c8:59:a6:7c:dc:5e:10:a5:
c0:8f:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:18 2025 by rpki-client