Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: CRcSGgGtEpcevFchOIdimMqkMwO3hbSrk4Gqvd09QXg=
Subject key identifier: F0:EF:A7:AE:63:BA:F9:CB:B8:61:6C:FF:FA:F8:FF:0D:79:21:4E:2D
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 019A725CBCB514C39858D1755AD8F30BDF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 06
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: XboEdK3xIDFvJjunJFetI7wr7Xs.roa (hash: DUjE1oXn69cTox8Qm8z0w4X18Z6oVVbesmMEJc9r5hI=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: trV/gB0hXfPi/ZGkzesbdKd7yU5/OQLbv4uTetZJo9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bc:b5:14:c3:98:58:d1:75:5a:d8:f3:0b:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=f0efa7ae63baf9cbb8616cfffaf8ff0d79214e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:96:4e:ac:a9:0f:e5:ee:c1:08:47:b7:ce:
e4:69:0a:fc:75:b3:f3:ea:80:07:1b:bc:03:d6:36:
47:48:b1:3d:c2:df:cf:34:e4:53:fa:3b:f1:a8:dd:
d4:ff:50:aa:21:6b:c4:92:44:e2:84:ee:25:6e:07:
d3:67:46:de:be:12:66:0d:d4:a6:e7:24:4e:1e:c1:
d3:3e:a4:f9:e9:f9:04:d2:6c:b4:f3:6a:c6:9f:88:
e8:1a:f0:42:0c:20:fc:40:79:0e:1f:1a:90:29:f7:
06:ac:e5:8d:14:64:d9:8d:f3:07:c9:57:a7:d5:10:
d6:96:bd:d2:f1:d1:ba:6e:06:ac:ce:32:a5:8b:a3:
2f:df:ea:8e:f8:ed:bf:fa:3f:cd:af:f6:f4:bf:11:
f1:2c:31:34:d5:7a:22:e7:89:8e:82:3e:d6:dc:82:
28:2d:71:9f:ce:92:6b:4f:70:3a:62:c1:09:a0:d6:
f0:83:7e:dc:ed:32:dd:21:2b:cf:0a:fd:4d:19:96:
ff:a5:58:9b:0d:89:9b:53:14:bb:1e:f3:11:6d:50:
2f:5d:73:03:5f:52:05:83:76:8f:63:0b:7a:83:ac:
d2:c0:c3:16:70:82:e3:b1:0a:e8:b3:17:48:93:5f:
73:2f:61:0a:9c:33:6c:d3:83:9c:57:a9:29:f9:f7:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:A7:AE:63:BA:F9:CB:B8:61:6C:FF:FA:F8:FF:0D:79:21:4E:2D
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:98:4f:06:69:ea:bd:c9:c0:fd:a0:48:62:33:17:cf:bc:92:
7e:fe:c9:b8:9e:84:77:97:61:2f:41:96:5e:3c:00:a9:cc:b2:
2b:58:06:d6:22:03:b7:83:a2:67:53:dd:2e:8f:d9:1d:3b:e0:
0b:79:4d:90:44:82:06:0a:49:bc:f0:cf:8b:07:fe:e7:47:41:
54:95:c6:7d:ad:18:43:ee:0f:8f:49:9d:4a:13:ce:2d:32:86:
76:4b:a2:68:9c:54:8a:2a:9e:a9:92:99:6f:5c:29:8e:df:d5:
cd:86:6b:b5:97:16:78:11:6c:f4:26:d5:2f:30:ff:f9:e7:8c:
a8:bc:d5:ff:8e:61:af:91:d2:9a:f4:03:d5:32:ab:47:76:e8:
93:af:f7:86:df:a1:b6:0d:dc:84:c4:6c:08:e0:c3:9b:a8:ba:
84:0e:11:0d:1b:5a:92:75:f4:df:7e:6b:71:50:11:a7:96:11:
41:87:28:d0:3a:83:dc:c3:01:67:9d:15:5a:de:a5:d8:1f:cb:
a4:84:40:8e:d1:2c:18:d1:1c:a2:44:54:89:01:35:79:2d:de:
7f:49:ec:3e:7b:7d:50:12:a3:a1:92:a7:4e:0f:01:00:31:a7:
e6:bd:3e:cb:ed:cc:f6:e8:34:b5:d3:0c:36:c2:0d:91:95:e0:
ea:71:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:22 2025 by rpki-client