Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: ZWB0XARgSiUV4GfuFuU3KEha4SRu3WBHlPC2v6SjI6M=
Subject key identifier: ED:1A:9C:94:CA:60:62:51:05:C5:F0:37:14:1F:00:74:16:23:4D:CD
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 019A72CA4937BA0201AD4E6285F14218C4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:00:50 +0000
Manifest this update: Tue 11 Nov 2025 12:00:50 +0000
Manifest next update: Wed 12 Nov 2025 12:00:50 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: Zg6A3nNeDOVIBoH5QW3dQNVrctBsDqH0WIT3pYpBikg=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:49:37:ba:02:01:ad:4e:62:85:f1:42:18:c4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Nov 11 12:00:50 2025 GMT
Not After : Nov 12 12:00:50 2025 GMT
Subject: CN=ed1a9c94ca60625105c5f037141f007416234dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:91:30:17:45:dc:83:cb:12:2a:70:e6:17:
9d:c6:b8:26:17:b1:b8:87:c7:de:fc:b7:e6:d5:cb:
40:bc:1a:c8:31:5d:c5:20:f1:25:61:19:57:78:43:
f8:fe:a0:3b:e8:60:f0:5e:67:bd:42:2b:f1:3e:a4:
63:21:07:c4:c2:52:80:63:60:cb:ff:11:d4:cc:88:
3e:a7:63:b2:e1:cf:26:fb:7d:42:c4:d2:ca:3a:0c:
80:ff:78:ce:d9:d0:99:93:72:d8:60:a6:a4:28:f2:
df:a2:0b:f8:16:fa:1d:50:b4:d7:12:0e:69:55:c2:
51:da:40:a9:09:d9:8a:13:80:4b:12:04:f1:a0:57:
30:b7:d3:fd:79:13:72:e2:4b:87:61:3b:d8:41:19:
37:10:10:54:e3:ff:ec:93:9d:92:02:6e:af:ca:ae:
c2:da:76:54:b1:a5:cd:42:ef:e9:71:98:a2:da:3c:
ef:15:39:bd:58:ed:86:d9:7d:ba:1e:f0:ad:63:1a:
8c:fc:06:6f:62:50:ec:6c:4b:82:20:48:75:d5:a8:
08:42:74:36:82:61:de:d6:87:1c:cb:f5:91:d2:52:
9b:cd:17:ba:fb:64:5b:b1:1e:fe:2e:59:e0:41:70:
19:77:a1:05:14:e9:7f:87:fe:ca:3a:4b:7f:0d:fa:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:9C:94:CA:60:62:51:05:C5:F0:37:14:1F:00:74:16:23:4D:CD
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:b7:b6:b9:9f:9c:cb:66:a3:ba:eb:f7:da:82:88:63:ff:
a7:c2:55:32:eb:43:89:db:d2:13:82:56:71:13:eb:da:26:c2:
50:3f:70:2a:a1:ee:5b:6a:52:fb:c5:5e:5d:94:e6:ad:78:7e:
25:35:05:c9:6d:ca:f8:f3:b0:ea:4c:c3:43:f9:15:ed:47:89:
7e:9c:a0:ae:a9:eb:dc:6f:e4:e1:c6:bc:94:71:57:6c:9d:bc:
c1:0d:ca:2a:d4:d2:31:fc:3f:b4:8a:2c:5c:a8:ca:01:6c:5e:
9a:22:1b:a5:b0:dd:c4:f4:ee:f5:3a:09:a4:86:73:be:87:a3:
8f:b1:a8:d4:ca:9c:39:d7:b5:b2:89:45:3b:03:2e:ef:77:ed:
89:3f:fe:0b:d0:77:70:08:ae:3f:ec:79:0f:23:9b:a4:f6:94:
00:00:05:15:3d:bc:04:09:b4:35:ec:16:f6:85:bc:f0:5f:83:
a7:d4:7c:19:27:d0:89:d0:60:54:2a:9d:6e:d0:33:4c:43:bf:
c0:e9:ea:32:6f:b8:40:31:9b:a1:6c:bc:ba:c2:f5:df:96:31:
99:ed:e3:03:ba:12:15:38:0f:b4:ad:eb:5d:90:8d:2b:c2:45:
b9:63:29:ee:b2:a3:eb:d8:e3:d8:f1:b3:9c:36:81:cb:8f:23:
db:71:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:46 2025 by rpki-client