Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: 6gf7Q1eE962T0VRmKkeheSb0VCOpPybimiF8mN/O9pM=
Subject key identifier: 9C:0D:E3:FD:59:1C:05:0B:F0:67:2E:0A:0E:28:16:B6:3F:11:D0:AB
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019A71EEE61336D0EF94DBB0AF2ED061FA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: 9_3AMOZnpM6z-fi5v8uDFndWNJg.roa (hash: W3uq1C+bH3S0gEZOoKLsSIrs9sVbwnRIm2HD8kmqAGc=)
2: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: hqkV8OWHqO49EmgcxXQM6QVVkPNIJr3DtLUKVN3tzpw=)
3: jtLIKZheIJbw9TwyWl-fpzVLvnE.roa (hash: IhEUym2kurgLTl3Vw4ZlxqTomcA/YLaDzPHSwrVgpmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:13:36:d0:ef:94:db:b0:af:2e:d0:61:fa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=9c0de3fd591c050bf0672e0a0e2816b63f11d0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:79:05:8d:02:24:fb:aa:d2:37:2c:47:02:
22:b2:f1:7b:26:53:5c:cb:4f:bc:b2:c2:db:bc:a4:
41:0a:8f:94:d1:75:f9:22:66:d0:ff:65:03:61:b1:
27:65:63:85:c0:d7:a6:c4:c4:76:fa:ef:94:5c:6f:
f2:1e:6d:f5:55:91:41:24:4a:06:6c:f7:ed:17:68:
06:e8:e4:6f:99:67:7e:8f:0e:3e:b3:9b:d2:ad:7b:
02:3e:4e:ce:84:c4:78:16:cc:31:3e:80:e2:62:ce:
6b:73:e0:88:67:e8:b7:98:a1:72:00:0b:7b:cb:80:
e4:e9:e0:10:f9:d8:33:ac:1f:3a:2b:ee:7b:e9:8b:
78:ca:29:ad:4e:86:be:96:c2:11:20:5d:09:e5:83:
69:ac:1e:c3:9c:5c:21:cd:c7:6a:51:53:61:4d:33:
7e:1b:24:5b:0e:7c:5b:e0:db:30:a3:2e:6f:bf:b8:
0d:15:fc:6e:7f:fb:a4:ba:c8:b2:ab:02:31:74:5e:
1a:06:45:49:d9:cd:5d:ff:67:8a:22:5e:e8:39:5e:
7b:b3:d5:6a:3f:a4:58:3f:87:d2:e6:7e:11:5f:5e:
37:3f:9b:72:c9:1a:ee:1f:b5:cc:76:04:2d:f6:c1:
10:40:90:86:25:0c:ae:00:75:d7:db:e3:27:7c:f7:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:E3:FD:59:1C:05:0B:F0:67:2E:0A:0E:28:16:B6:3F:11:D0:AB
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:53:a5:cf:91:97:85:ce:2a:4f:03:91:0f:00:96:58:9c:
29:ed:7b:da:55:ef:22:c2:09:db:d2:5c:e4:c4:d8:e7:cd:93:
69:62:17:a7:06:1d:2b:b4:82:59:5d:f0:94:63:57:a8:a4:21:
81:ad:bb:e5:f9:c5:32:cf:b6:f9:9a:cc:24:e0:6c:2f:41:14:
9a:ba:2d:c2:c8:8f:e8:2f:00:02:ca:cf:65:3d:77:a0:67:5e:
0e:cd:bd:22:a1:b8:0c:6d:36:02:47:bd:b9:7a:74:d8:cb:50:
60:e2:83:0e:d3:5d:1a:40:e0:46:2c:86:39:34:af:00:8a:b8:
52:1e:c0:71:b7:6e:8f:20:27:88:6f:83:5f:49:00:ee:17:b8:
79:77:0d:d6:d0:55:d9:bc:bb:18:dc:ad:09:fa:9d:3b:3e:d0:
d8:19:d0:5a:0a:d7:73:44:75:96:3a:e3:2a:36:11:42:62:be:
ba:e6:09:15:a4:33:d4:3d:58:24:09:d0:ea:4f:2a:f2:5c:23:
7d:54:cb:11:63:f7:87:c7:c0:ba:b0:73:2e:1f:4a:03:22:9f:
f7:0c:4f:72:7e:c0:df:7c:7a:66:c4:e8:2c:1e:38:96:fa:6f:
cc:68:77:4d:d2:44:2e:1e:51:3c:69:cf:10:b3:41:22:7d:b9:
d2:01:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client