Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: H0Vto2VZNe7vy5bDfnJjXpmO2eYhTNfkL/pN3LSRuu0=
Subject key identifier: 4E:75:D7:5F:39:BF:FC:8C:9C:29:FD:E5:CE:23:01:25:28:A9:21:AD
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 019A73384EF3AF300283FAA4E7B27102CF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: GsoMJZEXGIRs9bpKgiCQHEy67eIpJpomxRX+uxGMwyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4e:f3:af:30:02:83:fa:a4:e7:b2:71:02:cf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=4e75d75f39bffc8c9c29fde5ce23012528a921ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:81:c6:40:a8:0a:18:17:a2:30:48:2a:3f:
00:b8:86:22:8b:c1:9d:52:34:ae:df:4a:6f:ba:6b:
df:4a:bf:08:1a:32:6d:94:9f:e9:7d:68:98:54:7e:
b1:2b:3c:bd:8f:bf:62:1d:c0:4d:25:8b:24:50:fb:
a9:3d:59:26:ae:b6:6c:bb:7a:06:9d:64:89:d1:f2:
40:c1:cb:ee:b9:12:8f:d7:a3:56:85:05:be:a4:8e:
0e:cc:62:51:c9:e2:aa:ea:f6:eb:b2:49:18:d4:82:
14:e3:46:bd:1e:28:55:09:93:55:69:5a:61:3b:d9:
8a:e3:fd:b4:89:6c:9b:e0:49:e2:26:c7:25:7c:9a:
9f:d7:78:1c:e9:d8:17:49:64:6b:fb:58:cc:92:3b:
70:40:86:77:eb:47:ca:97:89:73:68:bd:a8:5c:15:
f8:ad:38:9c:ab:6a:a4:90:fb:3f:1d:c9:d1:d8:3e:
7e:7d:7e:8f:8d:87:05:b4:50:89:01:28:85:81:49:
07:b5:6a:b3:5f:1a:8d:1b:0c:c5:c8:0e:dd:49:c7:
42:fb:e4:5d:f4:f3:da:8b:1f:78:16:82:4f:ec:e2:
e9:fa:6f:25:8f:fb:a0:c5:97:56:6b:54:6d:05:fb:
4e:1d:74:92:5f:3c:73:f4:2b:45:77:50:be:bd:c5:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:D7:5F:39:BF:FC:8C:9C:29:FD:E5:CE:23:01:25:28:A9:21:AD
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:9f:d3:a2:9c:ea:66:64:e5:9d:e6:08:09:56:43:05:a1:
33:e8:da:92:ac:dc:32:e6:9c:87:df:e5:9c:f1:ea:87:dc:e3:
dc:9e:53:ff:20:53:1f:3e:b7:37:42:64:0d:5a:5d:07:df:2d:
22:e7:b4:d7:e4:ed:5d:8e:0c:75:f4:1b:b4:03:c1:5f:c4:34:
c0:2f:15:06:1b:76:64:a6:86:3d:c3:a9:03:96:57:4d:d0:48:
be:a7:00:45:40:f1:37:75:43:10:ab:27:40:7f:64:10:b5:d6:
d8:20:84:96:52:5e:f6:02:ec:87:a8:fc:e1:cc:6b:41:2a:67:
a5:4d:36:ce:56:e7:3c:e8:15:af:a2:7d:8a:c1:a2:6f:37:3d:
cd:60:38:9e:cc:a3:97:78:81:89:e2:7f:da:e4:34:f6:47:fe:
84:99:10:44:cd:5e:b8:a9:2b:9c:98:f6:c1:5f:53:da:d2:70:
47:a3:e3:69:7e:77:5e:6f:31:1c:4e:8e:de:0c:e0:e2:0d:a6:
60:45:1e:a7:0e:69:50:a5:88:34:61:85:f3:29:d8:25:56:d7:
8d:81:f1:1d:7c:00:7f:ef:18:4c:5e:e0:42:17:9b:fa:78:11:
09:73:44:c6:73:57:7c:fb:b1:f5:47:63:fe:a4:d4:61:a4:41:
03:13:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:56 2025 by rpki-client