Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
File: fmT8p3Ppn2rcgao85cY2I-4rHdc.mft (raw, json)
Hash identifier: 01+e0gSv3jfZjw5f271OXByUakJGnwI0/y8W7pOpT9c=
Subject key identifier: EC:2E:05:00:F7:81:17:99:04:38:E2:7C:78:BA:C8:4F:D1:F2:94:B7
Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
Certificate issuer: /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Certificate serial: 019A714A2299F08462ED3A8E3CDD48C7B51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
Manifest number: 27
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: HqvZQvxiyKL1MboaLwDryLqqUFg.roa (hash: mT+u/6z5BYwjN/Vy/gZNBZTVxwODTZlmFaA5Aqiy6/E=)
2: fmT8p3Ppn2rcgao85cY2I-4rHdc.crl (hash: jxkXwplBF/WpRl1lTwpvG+JDCStGOCzGtFAMSlBxpRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:22:99:f0:84:62:ed:3a:8e:3c:dd:48:c7:b5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=ec2e0500f78117990438e27c78bac84fd1f294b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:92:6b:d7:2f:64:2e:b7:63:d9:08:df:04:
3e:39:6d:d8:80:df:eb:cf:b9:15:19:33:0b:33:99:
27:22:84:fb:66:c2:be:0c:32:06:cd:46:1d:aa:bc:
3a:82:39:bc:cf:b0:ad:60:83:5c:4c:da:da:f2:95:
b5:92:fa:5a:e3:1c:37:07:d9:05:f4:f5:12:ff:ea:
0e:96:58:e2:2e:f6:87:76:27:a3:75:29:a8:bb:02:
45:11:63:f5:c1:3e:b2:66:de:8d:e2:77:f3:b0:27:
f2:46:67:b8:ad:5e:7f:e7:1c:f9:df:a8:1d:06:67:
c4:cc:bd:4c:21:f7:43:6e:32:b9:29:ce:19:ba:4b:
f7:6d:3a:c3:20:68:5d:45:f4:51:0e:56:a4:db:e7:
ec:ac:2b:ea:08:7b:1e:dd:51:4f:31:5c:a6:10:96:
26:de:f9:f1:14:f5:20:af:79:33:20:8e:c5:86:2c:
b6:6c:77:a7:e7:e0:a9:c1:57:da:af:27:bc:f9:59:
88:c6:14:d0:0d:4d:a7:cb:69:73:39:23:3e:96:dd:
c8:18:f5:b2:0e:30:4d:61:13:29:cf:94:f6:ba:9d:
50:dd:42:83:bf:fa:3b:a4:51:46:fe:13:2e:70:a5:
87:54:ad:6b:cd:6b:da:6b:16:d7:4b:34:68:44:d2:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:05:00:F7:81:17:99:04:38:E2:7C:78:BA:C8:4F:D1:F2:94:B7
X509v3 Authority Key Identifier:
keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:0e:cb:01:d0:0d:e9:9d:ac:aa:90:1a:f5:9d:7b:3c:4a:42:
93:d2:43:80:f8:c3:0b:82:8a:d0:8a:3f:17:42:d3:c0:7f:d8:
71:c0:e9:6d:b9:a2:e3:fa:91:e7:c9:e8:41:75:a6:1f:0e:96:
70:79:f5:8f:19:fb:08:3c:9c:09:10:cb:ae:1f:57:f8:f2:90:
89:0d:2b:e4:69:55:eb:51:b0:f6:40:38:8d:a5:ca:75:9d:4f:
db:b2:8a:f7:c1:7d:df:83:b9:60:22:c5:bd:21:39:7b:c1:06:
3a:25:92:7a:fb:5b:38:29:f1:64:0f:e8:32:31:b2:3d:c3:f4:
03:94:07:55:bf:03:f5:c8:46:3a:e8:a5:70:42:97:52:ca:02:
86:1f:f7:4e:12:66:f2:aa:9a:05:33:93:99:ac:58:2d:76:4e:
09:2d:af:68:ad:20:38:63:18:1c:65:2a:f7:c3:1a:6b:71:c0:
69:aa:85:76:ff:5a:f5:46:dc:7c:54:96:ee:c6:32:49:c7:1e:
e2:45:ff:dd:27:4c:ae:b9:4f:c9:8d:6e:d4:9d:0d:39:dd:34:
98:23:a6:07:bb:15:ee:f6:de:cc:84:94:c2:f2:d9:4f:ba:33:
5c:28:dc:88:41:b1:25:17:a1:83:86:c6:10:b0:35:e6:ee:71:
35:d4:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:09 2025 by rpki-client