Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: +Lyo+k/jVH3+TzcvMRifxcK0ybr4p4FhGpU3tU05Yvw=
Subject key identifier: 78:84:67:20:0C:0A:BB:60:C1:74:B1:B3:2D:47:59:E8:A9:E4:2C:35
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019A71B8E91A55FC6B91594955EE917399CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0AAF
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: pvbESAd0QYotrJk0ewELH1IhShZIhsGaLKt/wzVH6h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:1a:55:fc:6b:91:59:49:55:ee:91:73:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=788467200c0abb60c174b1b32d4759e8a9e42c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:83:46:f5:77:f7:12:b7:2e:7d:05:79:46:
a0:a2:65:fd:68:9b:7d:fe:35:69:96:3f:33:a1:27:
ff:07:dc:37:d1:63:55:21:4f:7a:48:d3:fd:a4:27:
12:06:f5:fe:e3:40:d8:b9:e5:3c:bd:44:4e:0d:90:
d0:ef:03:d8:32:c3:2d:25:59:37:fa:49:ef:70:3d:
6a:fd:cd:7b:41:d2:2e:4b:92:b1:cb:13:d7:e5:0b:
a0:4b:32:8b:e5:99:57:69:22:a2:a0:02:23:ee:3a:
e6:14:f0:a2:e3:56:5e:e9:6a:19:f0:57:31:13:90:
ae:01:f2:48:a6:05:28:cc:1a:67:5c:63:fa:76:de:
dd:18:8d:b2:d5:38:c4:63:08:dc:37:24:da:a9:ae:
d0:23:8a:77:9f:82:cb:38:b5:46:84:21:6a:14:9d:
ea:c5:5c:c0:cc:0c:20:c4:6c:67:fd:1d:93:e9:5e:
cb:64:8e:e8:2d:ad:96:e5:04:e1:28:29:44:77:72:
b6:3e:f3:38:a6:d2:6f:23:cf:ca:d0:31:61:db:5c:
bd:5b:4e:53:85:40:c5:d7:a3:ad:c6:c4:07:86:f4:
59:aa:80:40:5b:a0:6f:70:73:83:ea:5b:5a:ed:06:
bb:11:5a:aa:aa:c8:b6:37:68:89:c1:80:fa:56:18:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:67:20:0C:0A:BB:60:C1:74:B1:B3:2D:47:59:E8:A9:E4:2C:35
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:8e:85:83:7d:d5:2f:af:b3:18:cd:55:37:e8:80:fa:cf:
b4:3e:64:63:20:cd:ad:58:1b:35:4b:62:36:a8:89:76:ea:68:
83:c7:ad:36:27:6f:9f:88:da:c7:49:ed:b3:09:72:ea:4f:0d:
15:6a:4e:79:a3:be:61:fb:85:6e:98:5e:b5:5e:50:96:4f:c1:
d3:7a:9d:12:c6:97:68:72:cc:d9:03:05:6b:6c:5d:02:4e:3a:
db:c9:1b:69:6f:ad:b9:25:16:02:ca:06:57:c4:2d:03:c5:85:
6e:76:33:3f:73:72:60:26:ad:db:11:84:56:db:33:8d:f6:7f:
c5:04:66:dd:d0:47:9f:e1:d6:2c:c1:e0:3f:c4:d4:a1:7f:a8:
13:c8:13:6a:6d:7a:2e:65:7b:f7:59:98:24:53:f4:0b:69:b0:
65:1d:7d:ec:ce:fd:83:f4:b0:9b:98:24:43:1f:d0:cc:57:bc:
00:1a:43:b5:8f:68:c3:cd:d6:03:4d:b3:72:34:04:06:be:36:
6b:45:08:77:71:30:c8:ff:3b:ce:68:8f:9a:74:40:9b:0b:b4:
c4:8e:32:7e:f7:22:99:67:4b:9c:e6:b9:c8:0a:12:55:2d:21:
16:b3:13:26:31:a8:72:de:a1:5f:1a:39:83:58:e7:86:9b:aa:
61:55:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:59 2025 by rpki-client