
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: vBTmkXdFQW6cWHTh/JXCJ8afYUadKfEkjc+Ps7+tKMo=
Subject key identifier: FE:9E:E3:71:BB:6E:5F:03:16:0B:4A:DF:D2:6B:4D:41:1B:FC:24:DB
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019A71131542E4520830FC69FD117CAFC343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 0A6B
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: G02lLe5+j0a3fCnWsXrhP3edBDe0jWs79JBTPqxNlQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:15:42:e4:52:08:30:fc:69:fd:11:7c:af:c3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=fe9ee371bb6e5f03160b4adfd26b4d411bfc24db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:6b:d1:e1:44:ac:d4:c3:70:b1:ea:f5:ae:
22:fd:1e:3f:27:cd:50:f4:c5:97:06:68:91:3c:8d:
18:12:8e:3b:b4:d5:81:16:e9:77:ca:3d:3d:17:30:
a8:3f:56:e1:8e:f2:e7:40:6b:6e:1a:d9:f2:14:0c:
11:f3:f7:89:22:22:2f:d7:fc:c4:a9:e5:2c:d1:59:
3d:9d:92:d6:cf:5c:5c:31:ee:7d:9b:87:f8:72:b6:
51:15:a8:d6:0c:af:f4:6a:3a:83:ae:14:c2:cd:ca:
e4:bf:f9:f3:8e:43:88:12:c9:b0:93:c3:c9:4a:9e:
6f:ee:9c:0c:d9:d6:c5:08:fb:44:f0:4c:be:c3:22:
0d:51:9a:08:3e:36:d8:88:d8:fa:c5:f2:3d:eb:ec:
b3:cf:9c:33:4d:10:6c:42:0d:5d:a6:5a:43:de:34:
6f:56:7a:1c:c2:c7:fc:98:5b:80:18:31:9c:48:7d:
79:29:56:80:82:33:c1:06:b2:7b:f0:5b:6f:f3:bb:
13:14:0b:03:6e:08:6e:e7:c9:ef:68:0d:2a:12:c1:
c5:9d:1d:f2:d0:a7:19:0f:88:a0:72:5c:aa:06:fd:
c6:8d:42:97:b5:0a:9f:91:93:f3:ae:d1:f1:34:6a:
8e:5d:c5:3e:03:dd:7e:62:14:40:e6:27:2a:d4:c4:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:E3:71:BB:6E:5F:03:16:0B:4A:DF:D2:6B:4D:41:1B:FC:24:DB
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:c3:c9:08:55:6c:92:05:5e:72:9f:1a:e9:a6:ef:b9:fb:
0b:ad:9f:b2:23:00:b4:d2:dc:08:30:04:68:59:f8:99:73:00:
f8:5d:4c:11:b9:19:f1:49:f8:c6:06:a4:22:5b:4d:07:32:96:
5b:11:ca:81:87:13:72:7e:c1:b4:8f:f5:32:2f:bf:c4:70:2c:
83:7a:f4:65:53:d7:0e:22:1d:e2:b5:7e:76:60:df:88:ee:48:
15:65:6d:d2:48:78:f8:4d:aa:c4:0d:b5:ce:c6:f7:6e:54:7d:
00:ce:ee:c3:0c:4b:77:70:5e:0c:19:34:90:b6:66:5b:8d:61:
fa:c9:e4:25:a1:f4:c3:8f:63:2b:67:26:0b:ff:e0:b8:31:10:
cc:fc:3b:d8:8a:ca:91:32:08:8e:47:1f:79:3a:00:1d:98:fe:
71:2e:8e:d5:d6:49:b5:da:3b:47:50:b1:ba:09:01:ed:54:8b:
15:c9:b0:39:c1:4b:94:bc:ce:53:96:cf:55:16:16:c0:39:e4:
42:2c:28:c5:1d:a8:a2:7c:52:1e:21:b4:ac:e3:95:97:3a:9c:
bf:91:cb:32:c5:20:74:8b:29:8b:a5:00:1f:95:79:11:a5:ce:
39:cb:22:20:6a:c1:dd:18:22:53:30:e6:13:5c:c7:51:b9:be:
21:bf:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:54 2025 by rpki-client