Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: 9B6FawTe44EZGghKRvMVm1mJ6YbVkemaa6q637okXds=
Subject key identifier: FC:2C:BC:B6:50:8C:AE:47:BA:29:08:FF:E3:AC:88:33:B6:CD:FA:36
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019A15A9A9B730F8FC91A8896374D67BC6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 6B
Signing time: Fri 24 Oct 2025 10:00:31 +0000
Manifest this update: Fri 24 Oct 2025 10:00:31 +0000
Manifest next update: Sat 25 Oct 2025 10:00:31 +0000
Files and hashes: 1: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: CZU80HbLyx+f5VqxLwt6ExCTH4SBhLggnfqzD9x4ork=)
2: zIaCxLUjq21dOPZ6oricOQf9_f8.roa (hash: lDpgOF97BKIlMEFYdLb+3oy7Ebe7Mk1d7MHbR+tgmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:a9:b7:30:f8:fc:91:a8:89:63:74:d6:7b:c6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Oct 24 10:00:31 2025 GMT
Not After : Oct 25 10:00:31 2025 GMT
Subject: CN=fc2cbcb6508cae47ba2908ffe3ac8833b6cdfa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:3d:50:66:04:c1:40:e1:60:6f:05:18:28:
db:dd:50:bb:08:69:c2:3d:a6:b2:16:68:da:a7:77:
96:97:f6:b5:e7:4c:69:ce:27:c8:46:df:15:25:cd:
8d:f1:f9:b8:e3:0d:e1:0e:db:c4:be:c5:8b:d8:7f:
8b:98:14:f9:05:2d:e3:ea:01:8a:35:b6:75:50:19:
21:c1:89:16:75:98:c4:3b:be:bd:12:67:3b:5d:fe:
79:c8:ba:7d:80:04:bf:68:6e:16:9a:3f:05:ad:71:
d6:47:dc:1c:a5:05:f2:76:94:be:be:6c:0d:ac:77:
dc:29:04:d6:12:4e:f2:a7:a5:08:e6:f6:52:8a:f8:
0f:61:a6:c5:24:bb:fa:fb:f8:20:8e:c6:81:e1:68:
ea:3e:5d:27:9f:08:da:2a:c6:87:03:06:d0:0d:7d:
51:12:98:d1:d0:26:aa:89:3b:d8:88:9e:d0:b9:4a:
80:6a:ec:58:46:6f:a6:ba:dd:dd:48:e0:c9:c9:3d:
f9:b8:9d:3f:36:23:d3:a5:cf:fc:a4:cf:21:36:f6:
34:42:a4:3f:5a:89:20:b9:4c:b5:be:6c:b9:d6:05:
d3:6f:57:16:ec:3d:ac:eb:f3:4b:da:1a:ac:81:a1:
78:00:cc:ff:56:31:8c:7a:58:1f:2f:04:62:f6:0d:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:BC:B6:50:8C:AE:47:BA:29:08:FF:E3:AC:88:33:B6:CD:FA:36
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f2:c3:05:cb:36:49:85:8e:37:7f:a0:26:a4:f6:fb:78:ae:
e1:0b:7e:24:2c:f6:58:42:ae:94:77:60:11:6c:7e:b7:71:79:
7f:c0:a8:a8:41:7e:84:6f:cb:a1:c2:e2:e5:6a:b3:dc:d9:e8:
74:d6:a5:9d:ba:e4:be:9f:cd:e3:40:12:bd:cc:3e:cb:f0:84:
0a:02:67:e9:43:a9:c7:22:55:4b:3e:03:44:8f:30:06:10:ac:
1b:2c:72:4a:fd:53:02:cb:b5:19:4c:ca:45:b3:1a:65:15:de:
0d:d9:e6:af:a9:4e:fb:34:c3:b5:9d:16:8d:14:51:8b:c9:45:
bc:cd:7d:20:72:53:04:66:3f:1e:c4:e2:78:73:c8:89:87:54:
07:a8:67:79:59:23:0f:54:96:4a:e1:ff:98:a7:31:78:a0:f3:
ef:d5:05:51:16:62:ee:0d:fa:8b:16:5b:41:2c:0c:02:fb:cd:
6b:1c:38:a4:78:d3:ba:d7:58:51:9d:e6:d8:d0:bd:05:e5:be:
c7:86:b2:77:5a:cd:7f:47:5d:c2:47:1b:d5:25:4e:2f:12:ed:
24:5d:f6:bb:8a:10:c5:b7:2d:5b:d1:b2:48:c5:18:10:bc:6b:
06:40:df:b1:d3:35:99:a0:e0:56:ec:b3:fa:58:cd:62:03:aa:
5c:45:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 14:37:39 2025 by rpki-client