Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File: faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier: slMGFrERsz+sTRZWF9Oh7sEuADswIJwCexHFkNFhUHo=
Subject key identifier: 4D:EF:5B:C7:4C:51:37:9F:9F:6A:20:55:B4:79:6A:C0:60:FE:45:09
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 019A221B4549C945657B4DCDF131D6597660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number: 0C83
Signing time: Sun 26 Oct 2025 20:00:03 +0000
Manifest this update: Sun 26 Oct 2025 20:00:03 +0000
Manifest next update: Mon 27 Oct 2025 20:00:03 +0000
Files and hashes: 1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: 08sKcP2j/UmHcdKITXY7FDZhPeK6nwbqx6ISXGMGqoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:45:49:c9:45:65:7b:4d:cd:f1:31:d6:59:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Oct 26 20:00:03 2025 GMT
Not After : Oct 27 20:00:03 2025 GMT
Subject: CN=4def5bc74c51379f9f6a2055b4796ac060fe4509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:cf:9f:4c:05:fb:0d:fb:f6:c2:ba:dd:72:
04:5a:39:0f:7e:e1:6c:de:0c:ad:20:38:89:ca:18:
c2:fb:61:f7:06:23:c3:03:23:90:4e:58:8a:ed:96:
2e:1d:90:7d:63:c4:37:fb:1e:76:ce:a0:ab:2d:67:
79:bd:d5:7f:9b:cb:35:c5:1d:9b:fc:1b:11:36:48:
34:07:72:82:d4:67:a5:a8:64:5c:fa:6c:14:00:6a:
c7:a5:f2:fd:f4:65:21:91:0f:0e:f3:22:e4:0e:29:
6e:bc:dd:82:9c:c6:48:78:38:dd:c2:90:f9:60:20:
c2:ae:d7:fa:77:92:c4:12:a2:6d:e9:96:ce:73:75:
77:da:d1:ab:26:df:5b:98:e1:b9:54:cf:16:c6:7a:
69:ea:51:c9:d0:bc:a1:94:71:88:7d:f9:51:3d:0b:
47:22:de:32:f3:87:df:e2:fe:04:39:21:99:8f:87:
ea:ab:93:84:4e:aa:08:75:d4:49:dc:27:11:ce:0b:
1d:03:17:dd:48:ec:f0:00:33:80:e2:2f:78:82:c5:
5e:19:41:cc:0b:c8:88:bb:14:85:5c:26:fc:68:a1:
73:b5:9b:f7:61:f2:3f:46:54:28:39:51:0a:e4:89:
98:39:fe:cf:4a:ae:87:80:bd:34:aa:e0:02:fe:ca:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:5B:C7:4C:51:37:9F:9F:6A:20:55:B4:79:6A:C0:60:FE:45:09
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:64:f8:cb:53:44:c7:28:06:f6:9e:87:e6:de:a3:03:16:
b2:57:88:d5:8c:07:48:03:1d:2b:7a:20:3c:5c:77:b5:3a:27:
df:2a:a0:de:72:04:be:7c:ae:e3:25:a5:67:61:d8:6e:b3:6c:
6d:23:a3:a1:3e:49:60:0f:10:ee:3d:cf:99:50:eb:fa:02:25:
6e:e6:ce:51:38:c7:e6:c5:0f:d1:7c:36:92:bc:ff:45:4c:da:
f7:8c:dd:9e:55:e0:c6:1f:8e:f8:a2:44:8c:c2:8d:14:18:b0:
97:22:61:57:b7:1f:b9:d4:10:96:79:45:35:7c:6d:33:6f:e5:
e7:ec:0d:ec:61:11:36:38:c9:de:1c:da:3a:fd:25:6f:bf:b0:
2f:59:2d:81:07:17:46:5c:4d:7c:a2:de:df:77:fa:7f:88:df:
ac:e4:aa:05:32:01:aa:d9:37:7e:25:50:50:dc:61:30:8e:33:
ab:3f:53:93:42:5e:30:fc:8e:d0:eb:f2:5a:b6:b1:d0:c1:e8:
52:be:f3:87:ac:9d:95:6b:36:ba:70:3c:d2:13:69:d9:4b:4a:
ff:98:c8:56:ac:2f:50:10:04:05:b4:e6:f0:08:bb:e9:0b:62:
cd:a8:26:70:d0:c3:9d:61:c2:05:ba:47:27:27:a2:ae:3b:2a:
7f:b9:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:56 2025 by rpki-client