Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: aKFJ9vS6snrGIw0h3bKkILq/fhpJ/e7RWNXBfcQVyJ8=
Subject key identifier: A6:C6:56:DE:32:00:3F:9A:B4:AE:9A:4A:C1:D7:49:DC:40:20:A1:CE
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 019A7226650AB685FD457E86872E4136C377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 1192
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: 68ERw9UIiHxhtSdz9avgfrBOiLZ1fyslEPp3+RFsEsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:65:0a:b6:85:fd:45:7e:86:87:2e:41:36:c3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=a6c656de32003f9ab4ae9a4ac1d749dc4020a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:e1:76:5e:ee:b5:28:78:35:1b:84:94:89:
e6:7e:30:da:a3:18:3c:ad:1b:80:f3:2d:43:3b:8b:
b5:17:25:da:48:36:a1:77:b7:f5:17:87:ac:74:5f:
b5:4c:59:e5:cf:bd:73:c3:75:46:66:40:cf:67:18:
98:5d:9b:bf:db:f3:2a:ca:65:cf:93:c0:7b:19:53:
53:a1:84:1e:6b:92:ea:ac:34:22:4e:b9:00:a6:38:
89:5d:d3:41:c1:88:a2:58:a5:60:84:db:67:35:ba:
07:d8:3f:ee:bc:65:be:64:77:08:86:11:c9:c8:7f:
fa:50:9e:37:d1:d6:34:9f:0d:5d:e5:55:be:be:3c:
20:aa:04:1a:d3:ac:7b:80:d9:50:9d:a1:b8:56:a9:
7f:e2:b7:51:37:76:7f:1c:d3:0c:c0:f8:11:9c:88:
4c:de:c3:d5:f9:8d:9d:a4:6b:e4:1e:eb:5a:b1:be:
51:55:e8:fb:b4:a2:7b:a9:09:a8:cd:16:59:53:ed:
f6:4d:46:3e:c6:8b:85:8f:6c:28:f8:01:da:3c:b0:
a3:92:a5:dd:f1:17:79:8a:2b:1a:a6:09:52:c1:6a:
78:83:de:56:4a:01:9e:91:f2:69:63:39:7b:2c:b0:
b2:30:8d:64:9a:2e:70:12:bc:91:3a:e8:da:c9:e8:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:56:DE:32:00:3F:9A:B4:AE:9A:4A:C1:D7:49:DC:40:20:A1:CE
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:b4:ff:08:cc:49:f2:8e:74:b1:3f:54:d6:37:89:ba:2c:
10:bb:ab:18:24:d0:5d:d4:a6:f7:ca:84:89:bb:85:51:e5:50:
1d:28:fc:be:5d:25:63:97:5c:ca:18:f3:8e:18:31:5e:e4:22:
f9:63:f3:e7:23:68:f8:ee:54:d4:58:ff:0e:9f:f9:2e:00:14:
3a:fc:00:77:f1:41:e2:98:b1:1b:e0:5c:35:dc:69:dd:35:e8:
11:9e:c2:2e:4e:42:bf:66:13:60:72:d8:95:5f:1a:e7:9f:98:
f7:96:73:32:65:86:3e:d4:f0:44:67:19:80:e3:62:5a:55:91:
c1:32:4b:0c:9b:82:52:34:d4:14:b1:38:d0:86:45:8f:32:ed:
8e:43:fb:3e:b8:78:15:fe:31:16:b8:28:fe:43:09:36:4a:81:
48:9a:17:8d:ba:1c:28:e3:c1:eb:57:12:f1:43:93:d7:b1:f9:
f4:64:6b:f9:92:d8:21:ec:3e:8a:92:a1:21:ab:c8:63:34:ba:
3e:4a:6e:98:f6:7d:e5:98:f0:df:96:43:74:15:3e:5a:c6:69:
53:09:a8:1b:ab:56:65:1c:d4:6b:23:02:a9:8a:db:97:8c:d9:
64:b3:d4:60:c2:eb:8c:8f:52:2d:6d:91:f5:21:08:74:21:4d:
7f:5d:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:16 2025 by rpki-client