Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: WQiDOVDSvUvLuFWPSxskmysdoR5Ub2yfEtRsDcLow7s=
Subject key identifier: 65:93:27:E3:C0:C8:7F:35:8D:B4:F7:53:59:0D:3A:D5:55:90:55:78
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019A72932BFFD2DDCAD11A8F21DF7900315E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 15FD
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: 23Dq0gVjBIkVKHqQuweMKGLS30viYMuE4O8vq4zMScA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2b:ff:d2:dd:ca:d1:1a:8f:21:df:79:00:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=659327e3c0c87f358db4f753590d3ad555905578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:c0:9c:11:f3:77:43:28:24:a5:1c:14:8d:
f7:81:08:13:08:12:7c:23:fd:6c:77:92:ee:b8:01:
d6:bf:aa:3e:a4:fa:e4:99:41:01:62:43:3d:b7:90:
7e:d5:48:69:c6:2a:a7:11:3b:c3:11:8c:45:58:20:
d6:2b:9c:1b:18:c0:89:b2:05:32:46:67:34:44:b0:
bb:f5:54:ca:97:ae:95:3c:29:51:50:34:b3:8c:1c:
6d:ea:ab:55:d7:10:3a:6f:08:45:82:e6:3b:07:62:
33:60:ad:4d:f7:95:7a:5e:a3:6e:a8:2a:83:7c:85:
cd:82:b7:ad:27:f6:b0:07:7e:bc:10:f7:d8:24:2a:
a3:92:83:c9:8c:2d:ab:29:39:75:2f:c7:79:cb:de:
0c:a7:40:be:24:b7:fb:f9:ef:5b:8b:cd:4c:40:90:
23:ae:bd:3e:d9:e2:4c:62:95:28:b2:f5:07:ba:59:
44:3b:68:1e:4d:77:5c:a2:eb:7d:05:65:88:de:a0:
44:af:65:3e:a3:83:2d:4f:61:13:74:bf:e2:e1:80:
cf:97:ac:23:3c:fe:49:b3:94:32:0c:83:6d:63:5c:
2a:d5:9c:85:c1:0a:23:72:ff:f2:e7:78:a6:e0:42:
22:53:f0:32:1c:23:6c:b5:d7:b3:e8:4d:b6:9f:63:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:27:E3:C0:C8:7F:35:8D:B4:F7:53:59:0D:3A:D5:55:90:55:78
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:cb:f1:32:7a:6d:8d:74:24:de:0d:ae:98:0b:b9:ca:7e:
9b:24:cd:7b:4d:30:58:fe:af:90:06:cd:bc:f6:72:96:98:84:
c3:c1:45:f1:f7:a1:e8:3b:2a:d9:05:3a:06:72:3d:a3:72:af:
65:62:da:78:cd:7d:7b:4f:1b:c8:47:16:21:9c:58:7a:f4:cc:
18:b6:d3:76:03:2d:58:95:6a:d2:77:5d:53:76:22:d4:89:9e:
c0:2b:74:d7:79:a8:ca:55:38:05:d7:37:f0:9d:0e:da:17:d6:
f6:d6:6b:7d:ac:63:5c:a0:02:71:ef:f8:ab:f3:fd:05:3b:56:
4b:52:94:29:51:87:a7:60:e4:3c:6d:da:87:d2:e9:af:fb:15:
81:8d:2e:bb:d3:96:4e:f2:0d:23:09:02:90:26:07:ab:97:bc:
d6:6c:12:9a:b4:28:28:7e:4a:3e:7d:b8:f9:98:f2:f2:e8:4e:
5d:4b:cb:26:51:00:e7:d9:6a:66:82:ec:22:0c:bd:64:7d:44:
a7:33:fe:5c:77:9b:30:79:0e:57:20:f9:16:d4:e8:cc:25:51:
8e:38:15:0b:c5:77:20:93:c2:e6:d4:46:ba:93:c2:8f:2d:f2:
bd:b8:26:55:2d:95:71:7a:8d:11:96:c7:da:c4:52:fa:32:84:
65:61:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client