Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: 7AsYXDb0FT5LugejunJh3H0TCkgNd9LMO4E5UI3z2ec=
Subject key identifier: 87:99:F4:87:1D:AF:14:9E:26:93:BA:C7:01:18:4C:C0:C6:E6:C4:84
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 019A729362B3A02033C33312DF87EB7685D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: 0267
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: bSM0e9v25W4MYT+zJF3P0v8sRk+80YaFvM6wV3hz8kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:62:b3:a0:20:33:c3:33:12:df:87:eb:76:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=8799f4871daf149e2693bac701184cc0c6e6c484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:60:4d:90:89:d0:21:aa:ae:4f:cd:86:b5:
3b:17:67:73:91:2c:83:7d:a8:47:44:ff:cc:15:d7:
50:23:ed:ab:9e:76:66:27:4e:9d:f2:26:ec:e9:a5:
ad:66:3f:ea:0a:20:c1:1c:e5:5a:dd:16:dc:8c:37:
3d:bf:fb:7e:2f:5c:dc:15:2b:cc:01:e0:bb:0e:b7:
fa:98:ec:ba:5d:47:60:1e:17:73:40:5f:cb:6b:ae:
3c:2d:49:da:51:2d:47:f7:51:30:46:1e:5d:91:ca:
72:7d:eb:a6:ec:b4:1a:db:da:03:65:9a:4e:a6:3c:
81:e5:64:fa:92:12:06:db:2b:6b:8a:9b:e6:ce:68:
b0:88:53:b8:36:0e:8e:76:c6:96:74:e8:39:38:d4:
d2:a6:cb:cd:29:43:07:41:ec:c2:db:40:05:2a:a5:
a8:1c:da:16:49:c7:53:b2:10:e2:35:30:54:04:ff:
de:78:67:20:40:76:27:7f:dd:89:6e:9d:3c:33:e2:
a7:20:ca:f3:23:15:98:26:05:db:a7:00:a4:45:8f:
9c:91:6d:2c:31:30:2c:97:e4:d2:c6:9a:f1:23:c3:
4a:20:4a:34:bb:54:4f:24:29:ce:dc:ad:79:4d:d5:
1a:fd:d8:9a:59:c6:9c:f8:97:09:b3:15:c5:68:fc:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:F4:87:1D:AF:14:9E:26:93:BA:C7:01:18:4C:C0:C6:E6:C4:84
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:30:ce:c1:31:02:bc:1d:ff:8f:82:c5:6d:06:9e:ad:f8:
59:da:56:51:4d:ad:4d:4d:cd:bb:d2:4f:8a:3f:00:e2:f6:54:
7c:47:81:25:9f:e0:e3:c0:94:fb:a3:5b:ec:8a:83:93:63:14:
23:ba:13:b1:8f:c8:08:f1:3b:77:62:6c:92:58:bc:cd:02:a6:
8c:38:c6:35:0f:65:6c:dd:bb:d6:6e:91:e8:b5:87:94:26:5c:
c8:38:94:e6:27:4c:0b:d7:51:af:8d:27:a7:4e:11:67:63:7b:
cd:08:79:eb:14:b0:bf:ee:03:a8:fb:a4:98:77:58:4d:36:6b:
e7:b7:5b:ca:d3:ff:2c:69:b5:51:62:31:0f:b7:42:d3:3a:dd:
a6:f9:4c:70:d0:4b:51:2a:16:ad:73:8a:4e:90:57:a9:06:86:
b2:e9:b5:ca:24:09:6b:e6:ba:3f:70:4d:4c:1e:71:2e:71:84:
fe:d0:99:2f:1d:83:ca:46:95:7e:4d:c3:f2:63:2e:d5:96:94:
67:07:4b:8f:fe:74:db:d1:81:a3:2e:4d:22:cd:bf:83:43:b4:
f6:e3:8f:f3:70:62:e2:42:d8:45:c7:ab:0d:70:1e:db:8b:3c:
a0:74:18:3c:a3:ea:14:d9:73:e0:2b:9c:b1:55:86:05:3f:9a:
99:d3:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client