Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: EkXHeqTcUUy46FlgKfH0lIcL7t1RbIxKidzFA5Kzaz4=
Subject key identifier: E4:9B:92:DB:3E:C4:49:76:33:CF:D0:A7:93:69:1E:24:30:32:D0:97
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019A71EED919893173AED5BD570988A3451E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 02D7
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: ZpboYCsHnrUruPaWvapquwHLe5i5spM8f0SVUtJ62Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d9:19:89:31:73:ae:d5:bd:57:09:88:a3:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=e49b92db3ec4497633cfd0a793691e243032d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:41:05:ed:15:c3:98:a0:6a:e3:18:d2:3a:
4e:32:87:3c:08:8a:c6:b8:29:c0:ec:63:77:68:1f:
7c:fb:ab:ac:84:50:1e:4f:12:c7:da:67:de:e5:9f:
21:f2:ee:ad:a3:9d:d1:6a:2e:98:d5:35:d8:b4:83:
79:a6:72:cb:00:84:a7:72:d1:75:0c:82:21:83:d9:
25:29:92:0e:41:3f:c6:26:71:96:5b:cb:25:b2:1c:
fb:71:0b:f8:a7:5e:85:2f:76:5b:05:86:77:4b:a0:
d7:fe:fa:37:20:b4:cb:c0:6a:83:d5:06:cb:48:f2:
39:54:19:b3:1b:18:2c:ec:c8:34:68:e0:e9:29:87:
d8:4e:43:7a:00:12:a8:48:dd:49:4f:5c:df:36:fc:
1f:09:72:41:7d:a9:d6:88:c8:bb:05:d7:69:fb:36:
cb:14:87:74:5e:6a:a3:30:7c:31:c9:66:dd:ef:7b:
ef:1a:31:ab:82:e9:d3:ee:1a:27:0d:ac:0d:cb:0d:
1b:36:92:e7:de:f8:c2:51:c6:69:ec:60:f3:3b:df:
56:85:5a:ea:fd:d9:7d:03:02:ef:ca:48:e5:09:43:
51:0b:20:88:ac:d3:97:5d:79:6a:52:6d:06:36:9c:
42:68:2c:73:6a:51:b4:c6:ab:7c:e2:de:0e:48:92:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:92:DB:3E:C4:49:76:33:CF:D0:A7:93:69:1E:24:30:32:D0:97
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:50:a7:87:56:74:a9:ed:e7:62:ee:92:76:8d:3e:06:43:50:
09:fa:e6:71:e8:ed:53:17:03:39:4b:0f:2c:67:38:01:90:b7:
08:8e:84:25:7d:86:9b:4d:3c:b6:37:a5:9a:ba:e4:aa:04:4f:
bb:3d:ae:0b:2e:1b:32:f7:f3:5e:15:33:5c:35:b1:0c:3e:b8:
c9:05:d6:79:7d:b8:2d:ed:85:9e:b6:87:3a:88:1e:75:08:54:
bc:08:e8:e7:b8:19:1b:08:05:13:d4:02:07:ee:2c:a3:eb:f4:
35:c2:37:d1:8f:be:e5:02:69:3b:f8:17:80:c6:a8:f4:df:44:
73:b5:ee:ac:25:e3:29:62:96:3b:32:d9:9d:fc:e2:46:c7:75:
15:65:01:a7:91:77:6a:7f:bc:af:e0:0c:2a:04:a8:36:32:ba:
77:d6:36:94:c4:47:c3:27:ed:ae:7c:0c:ac:a0:5a:43:24:34:
a0:f2:cc:e6:79:a6:05:b5:2f:cf:18:0f:5f:0d:76:df:32:a3:
6c:d5:f3:25:20:ee:7c:c2:5f:04:58:9a:f5:98:d1:f7:2d:f7:
b9:ab:22:7c:8f:01:05:43:5a:bb:98:27:ec:50:13:d1:2b:0c:
82:16:82:14:00:53:bd:3c:0c:e0:94:a4:ec:09:0c:97:23:11:
c1:ee:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:05 2025 by rpki-client