Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: RlM4OJsXpKcxg0TpdyIlvUZchweURfLC0Hygv37gQKM=
Subject key identifier: 6F:58:67:AB:DF:46:62:85:3D:FE:C1:18:29:BC:78:CC:46:04:D8:A9
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 019A71B93CAF7ED9F38AD9F15C1A5693BEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 0FAE
Signing time: Tue 11 Nov 2025 07:02:36 +0000
Manifest this update: Tue 11 Nov 2025 07:02:36 +0000
Manifest next update: Wed 12 Nov 2025 07:02:36 +0000
Files and hashes: 1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: zLl+VqZxC4KJ1nya8Iu5AW4kv5W0dNdXsf/2NwjCQ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:3c:af:7e:d9:f3:8a:d9:f1:5c:1a:56:93:be:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Nov 11 07:02:36 2025 GMT
Not After : Nov 12 07:02:36 2025 GMT
Subject: CN=6f5867abdf4662853dfec11829bc78cc4604d8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:58:96:e5:f4:e3:8c:ca:03:7f:13:94:1d:
d1:13:d8:98:c1:16:a5:f3:89:b1:6e:f0:66:cc:80:
a4:1b:1b:43:7b:f3:0d:56:0d:3b:43:78:36:28:57:
89:a9:20:cf:1d:61:9b:b8:7b:53:03:55:ec:71:84:
de:71:a3:df:ee:48:db:af:77:74:32:c0:62:0c:7d:
92:d9:f5:07:9c:9d:1f:bc:22:df:72:32:03:36:08:
12:1e:d7:78:ca:f4:30:03:90:1d:85:3f:ad:e0:48:
e0:c0:50:0e:8d:b6:2c:eb:48:43:d7:22:89:a1:ce:
bf:96:cb:d5:9d:02:b6:ea:b9:5f:0f:6e:a2:58:cb:
07:e0:ae:0c:72:21:aa:c0:5d:d8:ef:9a:a7:20:e9:
16:93:75:8b:b1:73:6d:90:d3:79:b4:69:92:ba:c2:
ac:8c:31:9c:50:b9:ef:c0:c2:c6:03:f6:84:f5:66:
e3:c6:f8:85:90:62:24:a1:ea:43:b2:a2:2e:b0:02:
cb:82:50:c1:db:38:0f:86:ee:82:53:81:ba:0f:95:
6a:84:87:50:a9:e4:4a:ef:f3:5f:36:2e:88:46:78:
78:5a:fd:75:79:07:f2:d4:2e:5e:7d:ca:ae:52:27:
d5:2d:c0:9b:ea:16:69:4d:68:b5:f7:3e:2e:08:18:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:67:AB:DF:46:62:85:3D:FE:C1:18:29:BC:78:CC:46:04:D8:A9
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b2:9b:b0:6f:2f:72:ff:0e:8e:91:cd:85:5c:8d:b5:e7:e2:
85:02:fe:30:a4:b8:45:66:de:3c:ff:93:a6:ad:fe:b4:66:4f:
93:a0:bd:38:8f:f4:81:a0:4e:b9:6e:78:e0:f6:4a:57:f3:26:
ef:e6:1f:c3:2d:37:d5:7b:2a:ba:1d:c6:15:9a:11:2f:6b:19:
d7:8d:f5:3d:bd:05:d8:f7:a2:31:a3:53:dd:6c:e9:12:bd:73:
89:fb:5b:31:e8:b8:94:99:ee:e4:90:18:3c:33:21:6d:34:c4:
cb:0a:b5:d3:5d:14:53:1b:3c:78:13:95:00:1e:00:68:88:5d:
cb:db:e5:67:80:3d:e4:6d:34:23:3e:d0:b6:61:6c:19:7f:a9:
58:bc:62:5f:a7:cb:63:c3:8e:be:19:a2:77:28:02:49:e1:d1:
5c:04:70:42:80:d4:c7:bf:af:eb:48:1b:4e:14:c7:0a:2f:fd:
b4:60:ff:14:71:be:5c:d4:ed:04:39:0f:27:3d:17:29:1c:d2:
f5:77:74:5b:5d:9b:e5:b8:40:f1:d2:9a:c7:e3:62:76:d7:30:
11:c7:6b:0a:a0:52:8d:31:6a:97:38:f1:7a:36:23:c5:c8:69:
0c:ac:0f:fc:ad:1e:1f:53:fe:2d:51:61:56:ac:7d:43:d5:7f:
5c:e3:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:56 2025 by rpki-client