Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: tnby/oWPJqUa7l3dRLCS1ceagCICZqyKi471NofzOyc=
Subject key identifier: EE:7A:21:05:94:BD:6D:04:A0:29:0D:51:E6:7B:45:1A:C7:D3:75:4D
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 019A25F83F6BB2E1F23517AEEC9B3A02EF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 14:00:17 +0000
Manifest this update: Mon 27 Oct 2025 14:00:17 +0000
Manifest next update: Tue 28 Oct 2025 14:00:17 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: XHGuAR1zhlcEtNnCFXo6qzQeeFdmSwXscO/opr/wKfo=)
2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:3f:6b:b2:e1:f2:35:17:ae:ec:9b:3a:02:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Oct 27 14:00:17 2025 GMT
Not After : Oct 28 14:00:17 2025 GMT
Subject: CN=ee7a210594bd6d04a0290d51e67b451ac7d3754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:27:20:ce:64:64:ce:77:1f:1e:dc:84:2f:
dc:07:c6:5b:d5:14:19:9e:86:95:01:b6:a2:4c:09:
63:f2:a1:69:72:d8:12:1f:85:c4:79:41:9f:b2:de:
af:df:6c:5c:98:f3:73:e3:71:8b:7c:7b:4a:a5:43:
c8:44:aa:d9:74:18:07:46:e0:4b:b0:b3:51:17:44:
7c:44:a2:a0:94:0b:50:0a:90:25:18:51:36:50:3f:
dc:7e:55:73:38:74:ee:8b:3e:c2:9a:4e:34:d3:07:
35:8b:08:fb:73:6f:d7:6a:e5:c3:ef:de:4a:dc:9d:
77:e0:93:34:80:ac:be:ef:f0:be:d8:7f:34:bb:bf:
01:ca:01:74:d5:97:04:1f:9a:3c:d7:d5:d3:86:10:
75:ab:ff:09:7a:3d:bb:b7:14:09:84:e9:fb:fe:b6:
9d:07:aa:bb:ba:a3:00:aa:9f:95:e7:fd:a4:8e:3d:
3f:20:1a:84:01:aa:af:6e:c8:c0:8e:d7:43:59:6c:
ea:b8:99:36:4b:4b:15:59:93:5d:05:03:8c:b3:4e:
1c:3e:c7:f8:96:f4:cf:bd:45:ad:1a:2a:64:4d:65:
66:e1:8a:52:f0:fd:8b:41:32:4e:bc:40:0f:77:f6:
56:90:a5:86:c1:69:1b:13:45:d0:b1:c3:a2:dc:19:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:21:05:94:BD:6D:04:A0:29:0D:51:E6:7B:45:1A:C7:D3:75:4D
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:b1:fc:7d:f5:92:59:7e:fc:c9:4c:48:aa:3f:05:8d:09:
78:0b:4d:28:de:20:b6:7b:57:14:53:16:9e:08:b2:85:f9:3b:
52:33:d1:09:78:57:39:d0:43:4f:15:bc:49:0f:a2:50:6b:28:
60:e4:03:9a:7e:d9:58:77:02:34:84:00:24:f3:97:a3:f9:3d:
aa:c0:ea:2c:3c:e6:4d:d7:6f:3f:e2:f3:7a:6a:37:3d:25:da:
c7:d0:ee:f6:f6:59:f5:d0:54:07:54:6a:26:99:af:ae:c2:0c:
98:89:31:7a:ef:bb:3e:ef:54:44:31:16:65:71:fa:af:a2:35:
4c:d6:78:8b:cc:eb:87:0a:46:d1:3f:b9:da:bd:f4:59:20:cd:
20:5a:ac:93:e1:b6:11:02:14:5b:07:f9:8a:f9:10:d4:a7:12:
2d:ab:35:c6:ad:e3:dd:e7:e9:6c:7b:34:ac:5a:10:79:9c:80:
2c:7c:74:41:a9:ef:6f:07:e7:af:03:c9:02:8c:c6:95:8f:62:
60:34:a1:77:ef:6f:57:ef:f4:51:12:04:95:e2:63:5c:2e:c1:
0b:99:2a:1c:0a:d1:0b:ed:2c:ca:44:0d:61:62:ae:e9:8c:19:
ce:a6:b3:05:61:d0:79:e3:8b:8f:27:6b:bf:c1:10:13:89:bb:
a5:9a:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:13:09 2025 by rpki-client