Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: Lq1K1wrfi6wcA0wmS+gz/WVP6jGuUOl8ZkGuU9I+JA4=
Subject key identifier: CF:60:04:27:1C:AE:95:09:24:07:62:AC:99:DF:3F:5F:6C:68:82:D2
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019A16F4146A0B642B9AB235B778FAB43C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 16ED
Signing time: Fri 24 Oct 2025 16:01:26 +0000
Manifest this update: Fri 24 Oct 2025 16:01:26 +0000
Manifest next update: Sat 25 Oct 2025 16:01:26 +0000
Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: pwLd97bRPX+sqXFJ9nu4Ht8GD7k9QOLyr/VIoQnQjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f4:14:6a:0b:64:2b:9a:b2:35:b7:78:fa:b4:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Oct 24 16:01:26 2025 GMT
Not After : Oct 25 16:01:26 2025 GMT
Subject: CN=cf6004271cae9509240762ac99df3f5f6c6882d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:63:3c:bc:eb:6e:94:02:7e:e5:25:ae:c8:
b7:9e:d6:05:b8:b6:3d:6d:d1:11:b6:98:cf:bd:63:
59:56:bf:c1:35:1c:d9:6e:35:0f:26:a9:e6:5b:af:
c2:8a:cf:95:14:7d:5d:84:dc:69:58:80:97:e9:03:
59:a7:b8:88:5f:2b:b9:4a:e3:9b:5a:5d:2a:1c:5d:
1e:e8:54:4e:ff:9d:f1:87:b2:c4:6b:9a:23:d2:77:
ad:39:69:dd:11:8e:00:74:94:27:09:f0:1a:73:96:
3d:2b:fe:b9:32:e4:be:6b:58:d2:ef:cc:8e:c6:d0:
74:5e:28:01:89:42:c7:01:df:dc:f9:6e:a2:7a:fa:
48:6b:db:24:39:64:ec:32:11:62:44:68:ea:36:ab:
19:ac:7d:ea:fe:e5:a2:ff:2c:28:51:af:48:69:20:
ac:37:e5:44:86:83:ee:4c:b0:bd:90:5a:26:7e:f9:
ff:86:e0:39:65:aa:a3:1a:d8:d8:b8:5a:1d:88:84:
6a:d0:28:c2:d3:7d:bb:73:6d:36:04:6d:8d:b0:c1:
90:df:d1:a1:9d:0d:54:f0:4c:4b:14:aa:e8:9a:49:
6c:3e:0f:3e:f6:b6:2f:1f:76:0d:27:da:1d:f3:26:
ff:c5:54:86:1e:f9:68:7a:12:5e:1b:5b:dd:a5:6e:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:04:27:1C:AE:95:09:24:07:62:AC:99:DF:3F:5F:6C:68:82:D2
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:91:5f:90:dd:ef:81:35:18:47:58:70:10:3c:06:a8:cb:
2d:aa:6e:37:46:e5:5f:96:d9:2e:43:ff:36:8e:82:0b:33:f4:
37:54:8e:35:b2:6a:53:1d:07:ce:7b:5b:78:6c:74:c0:3c:2a:
9b:26:b8:a3:de:a3:92:7e:f2:c7:ed:14:1b:8e:13:38:2c:2b:
7a:a5:1b:0d:fe:80:19:e6:22:58:5e:db:6f:f5:03:63:a7:1a:
bc:08:68:19:4e:75:69:ac:14:7f:65:cd:9c:dd:6d:05:28:b8:
0d:af:65:ed:64:92:c3:2a:3d:20:c3:10:00:9d:a2:03:94:8b:
50:ac:28:b8:f0:46:e5:09:60:fa:be:e3:80:7a:e3:3c:1e:93:
67:1f:b5:ab:a7:c0:30:ab:91:54:e3:62:51:67:ea:b0:52:37:
2c:a8:82:14:28:d6:0b:85:8b:7b:d3:b8:36:c7:3b:4d:0d:a8:
ea:4f:28:01:84:ff:17:9a:66:f0:08:7d:39:a7:ba:b6:62:43:
c4:83:e5:9e:61:3c:70:1b:4b:72:84:2d:a0:3a:9f:d7:41:f5:
6c:dc:93:d4:e3:ba:f8:f7:be:24:53:2d:17:ee:5b:f5:4e:92:
48:fa:2e:4d:69:5c:7d:d3:9e:c0:99:bf:43:00:98:36:0d:fa:
c4:b8:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:57:07 2025 by rpki-client