Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: 3PYDzalq2ER59kfD/oDWfBefDaiq7baTNiDdFB8xLGQ=
Subject key identifier: F4:55:6B:D2:40:45:72:F3:B6:5A:65:EF:67:04:4E:1A:07:5F:C7:A0
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019A164EEB726037003E26AB101AA92352A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 07B7
Signing time: Fri 24 Oct 2025 13:01:02 +0000
Manifest this update: Fri 24 Oct 2025 13:01:02 +0000
Manifest next update: Sat 25 Oct 2025 13:01:02 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: Zx1ALyvVbYvOsRk8WjnnoAgcJ2VAm0ZwWV5alc71Z3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:eb:72:60:37:00:3e:26:ab:10:1a:a9:23:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Oct 24 13:01:02 2025 GMT
Not After : Oct 25 13:01:02 2025 GMT
Subject: CN=f4556bd2404572f3b65a65ef67044e1a075fc7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:20:b2:42:79:ac:19:52:8f:a6:73:cb:50:
18:82:38:41:67:15:2f:e5:6c:f0:30:48:49:7c:65:
8f:30:83:5a:28:61:13:91:a1:0d:2e:88:57:10:a0:
2b:26:ba:7b:11:39:bd:95:7b:61:52:97:14:46:7e:
88:28:fa:58:3b:6d:84:d6:98:65:e5:48:58:d9:86:
29:b6:56:a3:01:74:15:95:ea:5c:42:50:5c:45:bf:
ca:83:c7:70:4d:a9:a5:a1:5a:38:f6:a3:d6:8d:91:
89:5d:ef:d1:27:fb:bf:8e:5c:31:dd:38:5a:e6:51:
17:e9:25:3f:40:cf:82:1b:bc:e1:b7:c0:24:d5:1f:
66:05:ed:5d:8c:49:ee:7e:03:61:fe:bd:0a:35:54:
d6:31:a4:90:14:33:04:56:a9:a8:06:fe:15:2e:03:
01:13:fb:e1:4a:9b:5d:af:c3:b1:ab:1f:c0:9c:a6:
4d:9a:2d:fe:d5:d6:84:76:8a:7c:8b:b1:82:4e:d1:
b1:8f:db:ba:1b:22:2f:a8:ed:60:18:8a:c5:24:46:
74:45:ea:82:cb:14:b6:ae:63:db:6f:0b:11:2b:43:
0d:d1:db:29:fb:78:c8:7d:9d:7d:e0:3a:9e:30:e0:
1d:14:63:06:cf:28:c2:be:df:0f:88:28:0e:f4:80:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:55:6B:D2:40:45:72:F3:B6:5A:65:EF:67:04:4E:1A:07:5F:C7:A0
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:8b:e2:cd:c3:b4:f4:f7:c9:de:f1:df:ec:ed:a4:ee:be:
99:41:d9:3b:51:f5:de:93:8f:70:ac:7e:0e:ed:b4:0e:31:cc:
a2:8c:32:eb:76:fe:b8:9c:14:c8:07:3c:7a:70:dd:64:e3:be:
8b:5f:0f:68:54:2f:2d:e9:82:51:f0:26:c0:42:91:b2:81:9a:
b7:e1:58:e5:79:17:3e:fa:df:d8:33:72:65:df:1e:14:d8:28:
ec:ac:0d:82:93:86:34:07:80:8a:c3:38:88:28:95:d6:95:49:
d0:1d:9a:ff:7b:7c:95:d8:e3:5b:e7:1c:92:7a:1b:ba:de:13:
0c:fc:79:19:94:c4:c4:40:65:ca:51:27:c1:89:c4:33:16:50:
ee:9a:93:a5:5e:12:96:83:e9:22:27:ba:f7:b9:a6:66:ba:7e:
91:ea:58:42:e2:c4:35:3a:cb:16:1f:73:c2:fe:8b:2c:93:27:
8a:59:cd:43:5c:58:c1:43:80:2c:f4:ea:9a:a4:65:d2:80:31:
ab:c1:a2:94:45:a6:bd:06:ce:e4:d6:68:12:16:cb:01:73:bb:
21:e8:72:c4:60:a2:23:fb:da:7e:c5:3b:9d:71:5f:b8:90:4b:
07:26:7f:f2:7b:04:b0:65:54:a0:b5:86:44:91:1b:b4:21:59:
c3:36:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 21:19:01 2025 by rpki-client