Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: GzkOTYDQRsyUvCI7M3SAfCRL78Y4w9RRDpevAT5WrEg=
Subject key identifier: 6A:C0:9E:A0:CC:91:CB:A5:A2:7B:CD:5E:62:DA:87:D8:41:27:55:BA
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019A4C984C79637C28A69EFAE7CB53B2C328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 096B
Signing time: Tue 04 Nov 2025 02:00:40 +0000
Manifest this update: Tue 04 Nov 2025 02:00:40 +0000
Manifest next update: Wed 05 Nov 2025 02:00:40 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 9TL+01Eu9DGFNgXvdG51QOElFxhDsws/+MJnN7IkBQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:4c:79:63:7c:28:a6:9e:fa:e7:cb:53:b2:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Nov 4 02:00:40 2025 GMT
Not After : Nov 5 02:00:40 2025 GMT
Subject: CN=6ac09ea0cc91cba5a27bcd5e62da87d8412755ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:27:32:f2:dc:a1:e0:64:da:92:d7:55:76:
f7:ab:2b:cb:39:a3:04:bf:32:f0:9a:8d:e7:b9:04:
c8:7d:7c:40:51:ab:96:71:94:7c:c4:3c:5e:4f:96:
7d:01:c1:79:e6:dd:12:44:9b:d6:55:fc:cb:56:80:
dd:42:0b:8f:fd:be:a8:da:ee:11:54:45:6f:ef:c0:
33:5e:3c:6b:cc:b7:2e:15:f1:93:93:c1:fc:cf:a7:
91:a5:3f:cd:64:22:1f:7e:4e:33:4b:56:88:49:37:
d7:32:0b:19:44:b0:78:7c:b0:c4:56:7b:3b:46:52:
9e:1a:8d:0f:c3:8e:66:d2:cd:da:cd:c3:4e:a0:16:
66:cf:01:fc:11:02:7c:fb:4e:bb:eb:25:cc:37:53:
04:31:59:41:1e:7e:54:5e:84:1a:a1:84:b8:07:cd:
39:a9:56:ba:23:5a:db:95:48:c0:63:33:c8:dd:e5:
9a:1a:11:6b:a4:0e:fc:97:58:0c:df:5b:37:ad:82:
92:8b:a1:25:95:3a:33:fb:f0:63:a1:b8:bb:a9:81:
61:f6:a5:7a:ab:d8:12:6e:67:11:e5:37:4b:1e:c3:
76:82:9c:84:3c:8e:8d:33:10:95:1c:8d:33:12:78:
1c:d0:0e:bb:f1:88:2f:f6:dc:22:f9:75:8c:5b:3d:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:9E:A0:CC:91:CB:A5:A2:7B:CD:5E:62:DA:87:D8:41:27:55:BA
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:81:b8:8b:eb:a4:e4:17:2e:88:bb:4d:aa:03:eb:5f:9a:96:
b1:d3:bc:22:6a:76:48:36:ca:67:53:e7:cf:b9:b8:6b:f3:0d:
23:0e:47:64:71:e2:eb:4b:f9:68:8b:ec:94:bf:4f:39:53:3d:
76:92:3e:d6:00:69:18:8d:a2:44:1e:e8:66:9a:cb:29:5a:0e:
ac:42:d4:0e:8e:ae:ff:de:39:bc:4a:4e:99:1d:1f:18:4c:39:
e5:7e:f1:0d:03:d2:2a:16:9c:16:80:f9:81:5d:e7:61:7d:6a:
01:3e:9a:e2:15:22:2e:a7:2f:14:e6:6c:d2:b0:6d:57:98:c8:
4b:82:0d:ce:7c:72:50:8e:f9:72:85:0d:da:62:71:b3:e9:14:
a1:ff:d3:ad:c1:e2:7b:a3:c1:7c:9a:44:f7:7b:96:02:5d:8c:
4a:d9:2e:51:8e:b9:7a:3b:11:4e:65:43:f3:7d:3d:43:e1:e2:
5b:15:d6:40:49:10:9a:44:65:e6:be:f6:c7:5d:80:3d:4d:c9:
bb:8d:0f:21:14:41:28:39:9c:d2:c5:1d:22:af:7a:27:44:fb:
24:6f:4d:68:74:2c:09:02:fd:1a:71:94:27:96:5f:0d:b3:01:
68:3c:ad:d6:dd:e8:aa:28:d2:48:18:46:f7:6e:00:27:72:29:
4b:8e:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:10 2025 by rpki-client