Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: +YKQHrLckyJgMvQ92qVCMrIPCXaIjYZqJQCQLKcbZ34=
Subject key identifier: EE:F5:5E:D1:58:04:47:4D:37:77:F4:5C:BA:22:87:E5:98:A4:C0:0B
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019A209B6FD8CD2A85E468E20556FB81828C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 02D2
Signing time: Sun 26 Oct 2025 13:00:48 +0000
Manifest this update: Sun 26 Oct 2025 13:00:48 +0000
Manifest next update: Mon 27 Oct 2025 13:00:48 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: ctoZi2IHXS14hWPsCntguEzBxeTK7tvf4rlVMzRuuns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:6f:d8:cd:2a:85:e4:68:e2:05:56:fb:81:82:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Oct 26 13:00:48 2025 GMT
Not After : Oct 27 13:00:48 2025 GMT
Subject: CN=eef55ed15804474d3777f45cba2287e598a4c00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:0a:13:c9:1a:60:b5:1c:94:ea:ba:8f:94:
47:e3:64:fe:b6:72:33:8e:13:e0:7d:10:c5:81:f6:
e8:6f:93:d7:58:29:12:80:7c:5d:4e:ce:c4:9e:6d:
fd:df:85:1f:48:a2:53:71:5e:d2:97:dc:1d:af:b1:
42:12:7c:bf:10:d3:29:e8:c4:70:10:5a:a0:29:3c:
95:a0:b5:a4:06:c2:43:ac:c2:ed:b4:6c:ec:67:1c:
90:b1:dd:be:63:7a:63:d6:40:65:85:64:e4:6a:14:
42:a3:06:ef:60:72:0e:a6:7e:4f:96:8e:cb:a9:d4:
71:02:c5:f1:d3:90:91:91:4a:d4:2e:88:cc:7e:12:
bf:d1:00:d0:43:42:d7:9b:af:33:49:37:44:a3:9e:
93:f3:d4:23:1e:7a:ba:b0:dc:94:65:ae:7b:d8:25:
c5:16:24:c2:ec:5e:2a:c7:fb:25:4a:99:5c:20:81:
fb:ce:0b:c1:67:f8:1e:de:c2:52:b0:dc:ee:f4:f8:
83:51:34:6a:70:06:eb:b3:fa:60:21:7d:10:ca:51:
de:2a:55:7b:9a:90:71:99:41:70:74:90:99:3c:bf:
4f:9a:ef:cb:a2:4f:cf:2b:5b:48:6d:32:34:7d:d0:
2f:da:1f:6a:d3:8a:b5:25:ce:74:09:e9:73:32:91:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:5E:D1:58:04:47:4D:37:77:F4:5C:BA:22:87:E5:98:A4:C0:0B
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1e:ac:71:24:1b:8f:38:8e:e0:33:5e:4c:34:15:17:3a:66:
3a:b8:cd:0a:21:5b:c2:ef:59:a5:90:7c:ca:5e:7a:c7:b1:2d:
03:9a:6f:db:b1:60:d3:6e:54:43:c8:9b:d2:80:e1:c4:b0:ff:
da:d3:a5:41:ad:dd:f5:47:11:2f:1d:39:6a:d0:58:b3:1c:d8:
80:59:41:7b:62:14:00:20:dd:e6:c1:d3:7e:34:a5:17:28:fb:
e1:fc:f7:c2:62:e2:47:9f:0a:54:4b:1a:61:f3:e9:8c:9d:24:
65:94:43:d8:78:35:b0:90:b6:b4:bd:16:b9:1e:c2:72:ea:3b:
a6:b4:ca:3f:6c:91:f0:fe:b9:6d:47:f7:74:ac:43:ac:ed:50:
07:e5:1a:4f:9f:7f:f0:e2:93:71:00:d1:89:4b:3a:0d:a8:97:
3d:9f:84:4e:a2:a7:d3:b2:e2:87:17:a3:2e:60:68:1e:fa:5c:
b6:36:87:a4:3e:be:b8:cf:e9:d7:74:80:93:c7:23:d3:47:fd:
7d:de:e5:d4:e2:37:c1:03:be:0f:fc:1a:8d:82:81:36:a9:7a:
fe:cd:69:19:6b:b0:ff:74:48:46:e5:b1:f0:b7:60:d6:53:d0:
9f:d0:7f:2a:f2:ed:ed:3b:ca:34:da:c9:2a:aa:1c:13:28:92:
d4:b2:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:06:24 2025 by rpki-client