Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: vIUJ7zLNs3x5Qo5v0Q9//1GxiJZLOeos9cCaaR1rK9A=
Subject key identifier: 86:15:6E:87:7C:56:89:0E:A2:33:0E:15:BB:0B:9D:C1:71:B7:9C:41
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019A24E5F469BF2E40D3422270D8546913D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 09:00:41 +0000
Manifest this update: Mon 27 Oct 2025 09:00:41 +0000
Manifest next update: Tue 28 Oct 2025 09:00:41 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: /rP9SvNDAzp14SE/SidX7rbxo0F73aujyNBP6LEvUhQ=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:f4:69:bf:2e:40:d3:42:22:70:d8:54:69:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Oct 27 09:00:41 2025 GMT
Not After : Oct 28 09:00:41 2025 GMT
Subject: CN=86156e877c56890ea2330e15bb0b9dc171b79c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:bc:7e:ac:67:12:9a:95:6e:a6:b7:90:14:
a7:44:24:30:07:82:1a:00:37:96:f4:77:91:ca:3b:
db:5c:84:cd:2d:39:40:7a:4d:c1:3a:a2:c1:69:25:
f3:98:b0:95:74:ba:5c:89:4a:38:e6:0a:aa:86:8c:
8e:0a:f2:45:49:e8:55:13:78:82:54:21:66:c0:9c:
4a:0f:10:e6:c6:f2:f2:27:f5:df:31:4b:5b:ee:44:
6c:e6:b7:d8:89:4e:7f:c1:2b:3e:ef:c2:01:37:e7:
bf:57:fb:f2:0b:34:cc:11:79:c9:dc:43:56:34:26:
c6:fc:24:6c:fc:3e:9d:df:b3:ea:91:81:36:c6:f6:
3a:82:25:42:26:bf:54:ac:32:fc:3b:be:18:b1:43:
f5:61:e0:e2:39:5f:60:ba:bf:67:94:9d:ff:33:6f:
60:15:0d:8d:22:8a:5d:40:97:45:54:73:9b:52:11:
5d:7f:b6:04:72:94:83:48:14:b9:fc:30:47:a9:00:
e1:ba:43:c6:a4:d1:3f:90:e6:3f:bf:79:c4:db:fc:
53:98:1a:0c:6c:00:3d:6a:e1:a1:41:96:91:45:ec:
26:30:4b:81:fd:87:b9:4a:94:eb:a2:aa:8c:36:79:
1d:8c:ea:b0:f4:a0:e6:10:37:b5:5c:07:61:fa:38:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:6E:87:7C:56:89:0E:A2:33:0E:15:BB:0B:9D:C1:71:B7:9C:41
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:2c:93:29:4c:cf:21:74:ac:94:7c:94:ed:a3:84:a2:da:
bd:46:76:5e:a9:9b:03:c7:d0:39:5a:76:ac:34:db:2d:aa:31:
82:08:8f:66:14:1b:2a:3b:7a:96:cb:e5:bf:28:05:71:90:40:
6f:ee:af:22:e2:3d:26:ae:d2:86:b8:13:42:83:4d:de:1b:ca:
78:30:35:3a:3c:78:26:df:32:69:47:1d:67:ab:e9:69:35:78:
5f:45:c6:8d:53:26:5d:05:4a:82:8e:3a:41:ee:49:43:5e:92:
29:90:ca:8b:89:e1:09:80:a3:3e:1a:62:f5:c8:a7:0d:a2:80:
fe:40:44:01:cc:ce:8a:58:06:ca:e8:0f:8a:9b:af:64:05:c4:
a4:72:67:94:ca:8d:ed:dc:a5:33:b2:e0:56:b8:e8:e3:8e:2a:
09:d4:6f:47:f9:49:9a:ee:71:e7:2a:2a:83:97:4b:ce:3f:7d:
85:77:04:78:d3:fa:31:66:1d:9a:76:c8:cc:1f:51:67:c3:71:
ae:8c:87:a4:0d:ee:1c:f3:08:f1:ab:75:6d:3e:00:06:ac:19:
17:83:cd:fc:1c:cb:45:9f:6c:83:60:62:2e:b8:aa:04:4c:43:
79:7a:bc:b7:6c:37:93:e2:f9:d9:d4:a1:2e:3a:c6:39:62:c1:
b7:d1:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:21:27 2025 by rpki-client