Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: REA1W7cLWEygOXmHfrtiBtqxYR3i3BExhv0DijvZ9O8=
Subject key identifier: 8E:37:F4:68:97:44:47:9A:CE:68:F8:D3:53:60:78:F0:32:EB:AC:B9
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 019A1CF5625E51744E227BBB3A29C3778731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0FBD
Signing time: Sat 25 Oct 2025 20:00:34 +0000
Manifest this update: Sat 25 Oct 2025 20:00:34 +0000
Manifest next update: Sun 26 Oct 2025 20:00:34 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: DVKylJ6jF+6tdzae+kZGOr3BEXyXxdXiSZ3SF879H1k=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:62:5e:51:74:4e:22:7b:bb:3a:29:c3:77:87:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Oct 25 20:00:34 2025 GMT
Not After : Oct 26 20:00:34 2025 GMT
Subject: CN=8e37f4689744479ace68f8d3536078f032ebacb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:6e:b9:f4:fe:45:f8:08:57:30:10:6f:ef:
f9:bb:d6:92:d8:2f:bb:03:d4:1e:ba:4e:c0:c6:83:
ae:02:dd:41:d7:94:b3:48:bd:c8:41:39:d6:cd:90:
e0:df:ac:25:f9:26:67:67:13:bb:23:34:e3:01:38:
d9:50:be:d5:93:f2:32:bf:3c:24:12:db:f9:c5:da:
5a:e5:e6:3d:ca:41:a7:ca:d2:71:da:48:2a:1d:39:
01:bb:a8:9a:ea:7b:65:45:b6:3e:cc:5f:a8:ab:2f:
9e:98:ed:0f:9f:f8:a8:fa:5d:d6:8d:dc:7e:1f:05:
ab:df:56:51:c8:c2:fa:6d:45:66:8b:92:44:8a:65:
ef:68:74:45:93:b4:36:2e:27:8b:8e:ac:b9:38:90:
44:18:00:9c:6d:18:30:ff:69:92:22:2f:92:f7:44:
79:ee:8d:a1:92:b6:1a:3d:e6:0f:8b:45:d9:63:96:
6b:d2:c8:b6:26:61:91:2c:f2:a6:56:0d:be:99:d0:
51:36:df:e6:ba:5c:e0:34:bb:fd:d7:b2:99:d5:18:
41:87:7d:0a:d8:74:5a:7e:87:65:4d:c5:5b:6c:2c:
98:d3:7d:36:9c:3d:cb:5e:75:80:aa:f7:a9:c0:07:
77:fc:b8:83:a0:3f:0c:90:a1:75:ef:d1:06:ba:fa:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:F4:68:97:44:47:9A:CE:68:F8:D3:53:60:78:F0:32:EB:AC:B9
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:51:2f:05:7e:e2:e9:f6:d5:a0:bf:25:31:95:2d:9e:22:82:
20:4e:13:57:95:19:7c:67:c3:a0:d2:65:11:02:e7:24:82:0a:
d4:07:3a:f6:6f:c4:57:47:51:05:31:57:00:69:77:12:a3:30:
56:b9:e4:01:41:10:41:af:9b:9e:1e:36:a9:ad:56:e2:6b:11:
d6:aa:bc:d0:57:d6:c5:83:ea:8a:57:e6:d0:3b:ef:78:6e:17:
52:4e:ac:e6:d1:7e:53:3a:6f:58:5c:84:e5:6d:4d:85:54:99:
b8:99:68:62:68:01:73:9b:bf:31:c7:02:c4:2b:a6:76:48:19:
b1:59:51:5e:85:0a:2c:82:18:d0:4d:a9:9b:cc:84:84:fa:f7:
e0:a4:e8:0c:38:c0:aa:8c:bf:0a:92:3c:46:ad:ef:48:bf:32:
53:ed:e9:f1:5e:64:e7:aa:1a:3e:f4:88:09:45:a4:52:59:c1:
58:85:79:75:fe:f7:8a:05:96:7e:39:71:84:4b:5a:40:3b:81:
62:d0:2d:57:20:d0:08:5d:3c:81:a1:9d:53:c2:07:5d:b5:a3:
57:d1:cc:96:fb:c9:c7:f5:f9:1b:a5:44:60:2e:a1:a8:a7:2c:
90:f7:d1:e9:18:ba:2a:7f:ea:5d:12:26:a3:42:da:c8:8f:89:
06:c3:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:48 2025 by rpki-client