Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File: FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier: Dk/5l4aUuqgLZuArBG35Q1CjXL+da2X1uaqJ0W9BNDQ=
Subject key identifier: 0B:36:E8:89:6E:DB:9A:3D:AB:1B:69:4E:A0:9C:6B:9C:50:FF:C2:58
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 019A209B1DDA733C09ADE2F572DCF134ACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number: 0DEA
Signing time: Sun 26 Oct 2025 13:00:27 +0000
Manifest this update: Sun 26 Oct 2025 13:00:27 +0000
Manifest next update: Mon 27 Oct 2025 13:00:27 +0000
Files and hashes: 1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: MXzuioKK/ewGPhc8SdjrmU/igwTsHvHJ8dGILI8X8/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:1d:da:73:3c:09:ad:e2:f5:72:dc:f1:34:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Oct 26 13:00:27 2025 GMT
Not After : Oct 27 13:00:27 2025 GMT
Subject: CN=0b36e8896edb9a3dab1b694ea09c6b9c50ffc258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:ad:8e:02:c6:cc:ec:16:e4:66:e6:7d:b8:
6c:8d:22:5a:1e:13:5b:75:0e:0a:7d:60:e6:ce:0e:
ef:4f:f0:ec:75:e7:60:30:1a:d6:b8:a3:e2:32:f8:
14:23:1a:09:94:6a:5a:b6:7b:7d:11:3d:3a:fd:bb:
85:0e:96:0c:5f:37:5b:74:bc:95:00:e8:7d:ed:87:
06:8f:da:02:a4:88:86:e0:73:cd:6b:61:88:c6:15:
e3:a7:9f:9a:25:cd:c9:66:fe:bc:34:c1:ac:0d:56:
0a:4d:71:d0:7f:40:2f:82:57:ff:1f:67:79:2c:89:
91:e7:64:f5:b5:45:9e:cb:31:8e:bc:47:bd:5f:f0:
f2:24:23:4c:eb:3f:9b:1d:12:59:34:ff:f0:1c:ab:
fc:ca:64:68:22:fa:36:68:d4:24:3e:65:b0:f8:bd:
bc:c3:16:7b:ce:8a:04:a2:4b:3b:29:b2:ef:80:2c:
06:ef:e7:5e:d2:83:f0:25:f9:7c:89:3c:cd:39:14:
8d:61:01:3d:6c:ba:52:14:49:54:de:69:da:0f:57:
10:1a:b5:42:0f:c5:28:6c:d5:a9:3b:6a:0d:33:6f:
33:bd:c6:d4:24:da:44:5a:0d:77:c4:91:27:af:99:
91:88:d0:f7:51:33:ce:46:09:8f:4f:b1:88:8a:26:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:E8:89:6E:DB:9A:3D:AB:1B:69:4E:A0:9C:6B:9C:50:FF:C2:58
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:c6:6b:1b:0e:34:2b:02:7d:06:6f:a0:bc:6b:6b:3b:c7:
28:33:e3:fb:19:a7:2c:a1:2d:c6:75:75:3a:2b:0b:6d:3b:65:
62:10:54:b3:6c:57:90:6e:72:13:20:2e:21:8e:b4:e5:fd:66:
08:6d:78:6b:b7:e7:7b:f1:29:9d:db:a9:7a:8c:f9:f7:24:9c:
fe:dc:17:fe:d6:8d:b0:f3:35:21:d9:a5:3e:4f:6c:df:b5:12:
03:93:6a:94:56:0d:e9:90:dc:ef:5a:2b:fa:07:d9:c1:fe:3d:
82:39:6f:d7:0b:ec:88:0c:28:56:4f:7b:36:f1:2c:20:71:a6:
fb:13:7b:18:ae:46:c8:6c:5b:85:c8:64:41:a0:17:45:ed:af:
97:45:ed:d9:69:98:93:7b:a7:85:5e:67:09:00:8f:b1:06:0a:
e7:bf:53:41:2d:99:dc:83:91:38:25:5c:63:9d:96:f7:58:12:
60:bf:83:f3:9d:d3:a0:80:50:d2:a3:aa:72:31:02:c1:45:c4:
59:3c:a4:65:35:34:51:c9:7b:e4:df:3a:2b:a2:9e:fa:c4:fb:
5a:5b:a5:2f:15:fb:4b:c3:4d:a7:ec:f8:84:0e:25:bf:f9:49:
ed:60:02:05:85:23:87:22:ad:99:d8:b4:d2:c9:16:16:27:43:
1d:37:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:23:59 2025 by rpki-client