Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: zJxgaFWGBEX3uJLl3WIR5/C46XHe5cJ0wi0ZACZd6x8=
Subject key identifier: A7:E5:D4:68:D8:8A:32:82:17:A9:9E:21:04:2B:08:C4:4A:D9:DA:50
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0199FDA1D87A6BE8C511025808AF41B7EAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 18:01:06 +0000
Manifest this update: Sun 19 Oct 2025 18:01:06 +0000
Manifest next update: Mon 20 Oct 2025 18:01:06 +0000
Files and hashes: 1: 4xANHD6Y-K3jXI6UoJ4ngX292Bw.roa (hash: SR+eSJvfyVoaMrFO+uW3wC1Oz/meGcZseef5cWzluyk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: xRc2LQQTNkSX+Ao6K3NuhtCYjkelh+ky56iC0v0+a44=)
3: YNsdsH-n-AmHwzwHk8uEB1xLpbc.roa (hash: Z2put0LP3pL4K0BauVWtqhB4C8iT6AgFRsfUMqrtzI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d8:7a:6b:e8:c5:11:02:58:08:af:41:b7:ea:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Oct 19 18:01:06 2025 GMT
Not After : Oct 20 18:01:06 2025 GMT
Subject: CN=a7e5d468d88a328217a99e21042b08c44ad9da50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:cc:07:43:10:d8:cd:b9:b7:48:c2:f8:0a:
e3:e2:3d:c4:d9:fb:df:d1:4a:56:05:0c:95:23:71:
35:22:00:e9:e4:f5:7e:05:32:b0:18:84:8a:24:68:
a6:28:a2:17:c8:25:09:9c:67:f6:d8:1e:f0:8a:58:
54:f3:df:ff:4c:64:72:77:ee:6a:ec:91:0e:aa:ca:
93:d1:87:c3:c6:f6:62:a9:74:e8:73:62:7e:25:d3:
88:d9:4c:c0:44:2d:c5:3c:9f:30:6b:34:9b:f1:21:
a4:d3:a1:ca:39:11:d5:63:e3:e9:b4:50:44:9b:49:
5b:50:89:d9:14:dc:81:3e:9b:b3:3d:5b:08:b7:32:
7b:05:94:4a:fe:98:c2:a0:ed:3a:3e:82:4d:2c:86:
25:3e:e3:ff:5c:e2:11:f3:fe:52:16:d8:7c:4b:ab:
bf:d0:4f:3c:51:0e:61:e6:8e:93:41:ee:ba:c7:78:
33:98:a7:12:3a:66:6b:49:5b:67:02:21:01:b7:fb:
34:4a:ed:5e:89:86:54:73:20:0e:67:dd:ef:b8:63:
ef:0a:0d:43:90:dd:0d:c9:43:38:01:65:c0:5a:82:
9d:1a:ea:28:43:64:a5:1c:62:f8:f7:5b:a1:09:f3:
34:25:51:bb:d5:91:88:19:4f:2e:5f:3d:de:45:35:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:D4:68:D8:8A:32:82:17:A9:9E:21:04:2B:08:C4:4A:D9:DA:50
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:6d:1b:bf:7a:d1:02:26:97:4e:d4:9c:b3:e8:a0:16:05:
d1:18:b9:66:0f:22:da:74:e5:98:86:b0:45:cc:b6:8e:1e:08:
b1:ed:4f:2e:2d:41:b5:b5:dd:90:47:39:22:13:98:4c:c5:2a:
c2:a7:13:8e:b5:9f:67:86:91:b2:1d:21:89:44:51:8f:f5:37:
27:5d:67:43:de:cd:44:f5:fb:b3:db:66:72:94:e1:cd:bc:5e:
f9:81:0c:02:2d:47:c3:25:e6:77:cc:74:e1:86:b3:0c:fa:9a:
e3:b0:32:07:b9:e2:a6:5c:5e:68:a5:6c:8f:6f:be:ba:d1:ae:
62:2d:21:35:72:1b:6a:f1:49:e0:2f:2d:5c:d4:66:ab:7f:67:
91:e9:68:91:f7:67:4f:6b:c8:89:8a:7b:f1:e6:d9:df:f2:c1:
30:99:7f:21:cc:61:24:9f:91:2e:18:30:13:15:65:18:e2:33:
c8:78:5b:29:43:cb:cf:a7:ea:b9:99:f1:04:b3:fe:b6:1e:1a:
e8:25:6c:d6:b3:f2:32:89:9e:b1:fd:56:cc:f6:48:4b:ea:e2:
e6:b2:68:4c:ea:b4:5e:4e:f4:d8:fc:44:65:9d:b2:b7:b2:49:
36:10:4e:7d:88:b4:fb:18:ca:0c:9e:63:c8:10:4b:a3:23:09:
04:63:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:34 2025 by rpki-client