Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: VrbfV++ptgZVQmS3kr1+LnsPr0RrOxsfZMcrlIs7re4=
Subject key identifier: 86:C0:88:0F:A6:D9:6D:33:92:79:40:43:03:70:CE:5B:80:41:76:05
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 019A2DB21BD558D2617B55E0C658023FF5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 16FA
Signing time: Wed 29 Oct 2025 02:00:38 +0000
Manifest this update: Wed 29 Oct 2025 02:00:38 +0000
Manifest next update: Thu 30 Oct 2025 02:00:38 +0000
Files and hashes: 1: 1-REcO5J_sNDHp5QyMHQK9hJs5o0.roa (hash: xwGwct9zoFclxXhr71nd4I0i1zajfbDCLeCO4XmRVU4=)
2: 36xTaZN36e5rc-tObD7qGV8VMjE.roa (hash: wKPGdA5BYZvtaHrrMsjhE8Um1YRHqDiekeeAKB95GHc=)
3: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: ll8aK7Yk4jCdhuYvPG3USSRuY79ab3rcl8D0OJm2v6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b2:1b:d5:58:d2:61:7b:55:e0:c6:58:02:3f:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Oct 29 02:00:38 2025 GMT
Not After : Oct 30 02:00:38 2025 GMT
Subject: CN=86c0880fa6d96d33927940430370ce5b80417605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:d1:bd:07:ba:1f:c0:3d:63:4b:5a:4b:26:
5d:27:08:36:8d:37:ff:0f:a0:ee:04:38:4a:30:13:
a6:49:41:bc:28:2a:ae:e1:b9:a7:8c:a7:39:d6:3e:
c5:61:76:ec:96:19:ea:d3:6d:c2:3a:80:d4:8d:c3:
be:12:25:4e:15:e3:e0:07:b9:ef:f2:dd:a9:dc:89:
cb:3b:2b:08:f2:27:2c:8d:65:1e:09:e6:b8:d8:53:
63:63:f2:f1:58:0d:fe:55:fc:e4:f5:e4:a5:0b:6a:
1c:58:e8:31:42:49:85:a8:0c:c7:3d:ec:d6:72:86:
c2:ec:0b:8a:d7:c9:eb:ab:07:df:f0:ea:86:ed:c8:
5c:8f:86:49:0e:f0:14:38:03:cf:1f:b7:25:e8:4b:
71:f4:75:a5:88:06:cd:68:0f:23:df:2a:eb:7a:5d:
71:79:e8:66:68:9e:56:09:f8:e9:b7:e9:3a:c7:3d:
78:2d:2e:ea:45:f0:50:ed:9d:9d:b7:aa:e8:06:5d:
8a:c3:39:ea:3a:8a:cd:71:e0:77:f7:25:2d:f4:61:
93:ca:2f:4c:1d:28:70:a3:ec:05:20:61:19:45:9c:
e8:86:7a:0b:a5:d5:58:25:e7:bb:2f:fe:6f:a2:8c:
d6:4a:2d:4e:85:29:80:11:8c:20:b5:80:5c:b1:9b:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:88:0F:A6:D9:6D:33:92:79:40:43:03:70:CE:5B:80:41:76:05
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:c3:f4:6e:21:48:32:34:95:d1:6f:14:73:1c:fa:43:7c:
48:bf:d6:3d:b8:7f:85:40:ad:dc:72:d3:a1:13:b6:83:17:42:
89:21:82:54:09:50:ba:cc:64:ac:4c:4c:4f:b6:fe:27:c8:90:
56:9a:32:e2:b4:23:fd:10:43:62:c5:ba:9b:bd:74:22:05:86:
ff:54:42:1b:37:e6:0c:90:81:bf:43:16:6d:9b:a2:9d:4c:aa:
cb:2e:b0:58:33:48:00:89:f8:c3:6a:15:78:20:db:54:af:e2:
ce:55:67:83:b3:25:c1:46:84:73:df:2c:d3:52:1c:47:24:1f:
10:3d:75:ef:68:86:7a:66:8a:e5:6f:e1:9d:4d:38:26:da:de:
64:90:5d:99:00:7d:12:71:dd:6f:54:df:ba:c3:47:ea:6d:3b:
53:36:dd:76:86:80:81:10:41:92:2c:b5:04:8c:63:12:77:f0:
46:53:b7:0a:0e:48:27:27:69:f8:3d:28:41:ab:ab:56:8c:4e:
06:f0:5d:94:f6:93:6b:65:f9:cf:43:f3:0e:16:77:c2:e6:1f:
24:09:e9:57:2a:66:93:1e:48:2b:c7:f7:85:80:3e:5c:2b:b7:
5e:b8:12:2f:38:d4:6c:1b:83:a1:4a:4f:af:ea:91:1e:f0:f3:
96:71:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:06:22 2025 by rpki-client