Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: 7lUya665yyZxyJpMGOJWWhVGMs2mV5HdJgpbegjsw3Q=
Subject key identifier: C4:2D:5D:F0:36:9C:D3:52:98:27:8E:85:5F:5D:41:C0:DF:7C:A9:A3
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 019A71B90102C377958B72B7C750F7C7C16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 10FD
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: hsYKBHv5KJvL9h9O3J8WfPlHRSu3Dt+h2mlXcgrNuS4=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:01:02:c3:77:95:8b:72:b7:c7:50:f7:c7:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=c42d5df0369cd35298278e855f5d41c0df7ca9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:35:24:a5:34:ca:ab:ac:7b:d6:e9:ce:65:
eb:1c:4a:5d:22:a1:84:8d:c8:4a:b8:40:e5:7b:75:
85:c5:17:3f:2f:a3:df:af:42:3e:7b:d1:60:be:fd:
96:4f:d6:8c:06:cf:01:96:8d:fa:60:32:c5:7c:f3:
1e:89:c4:8e:98:3f:01:63:fb:a9:f0:26:f1:97:fd:
a7:79:18:e5:1f:8a:56:6a:11:fa:c7:86:ce:d6:03:
4e:9c:66:2f:74:70:8c:46:9d:35:95:7d:d6:41:c0:
ed:39:a9:1c:f0:ae:1c:32:2f:a5:53:b2:7e:da:c2:
22:f2:71:af:f9:f0:63:2d:da:24:47:4b:95:d4:62:
ad:a4:d9:30:62:01:43:8f:08:3b:3f:d2:c6:7d:df:
d4:ad:07:a2:3e:44:0f:2b:33:54:e4:07:65:91:c5:
f3:3b:95:fb:4c:20:96:d1:38:77:c0:c8:59:67:bb:
64:7b:2e:58:76:d2:a6:92:9b:4d:67:81:cb:f8:07:
e2:67:1d:3d:94:d4:4d:37:a5:fa:57:e5:92:39:49:
b3:ac:57:47:dd:42:32:1b:b4:8e:16:2b:a9:03:de:
bd:ac:6e:97:c9:5c:b2:69:6d:ba:48:62:1f:70:6e:
9e:14:15:c9:0b:3d:70:3a:94:5a:32:b5:43:fc:38:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:5D:F0:36:9C:D3:52:98:27:8E:85:5F:5D:41:C0:DF:7C:A9:A3
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:ee:c1:41:05:1c:08:ad:fd:41:4f:98:2a:2e:39:07:f9:
50:d9:c9:a0:d7:38:40:8a:2e:ff:80:24:77:bd:26:5b:12:37:
6f:81:fc:94:bc:2e:ff:a1:28:67:32:25:bf:db:49:99:f6:bf:
f8:36:4d:9d:6d:6e:13:ba:3f:6a:6c:e7:5a:2b:7b:00:13:00:
99:4b:89:82:44:ba:e0:58:7b:83:6d:ff:d8:52:24:7d:1d:66:
7d:c3:5c:2e:37:3d:ef:f1:d2:87:a5:ef:10:73:d7:f0:4d:65:
f5:6c:f3:32:94:18:87:a1:5d:c2:20:1d:c8:74:ab:d2:1f:62:
7e:8c:f0:7a:b0:35:d5:6c:58:94:e7:e1:24:0e:5d:65:63:f3:
fe:6e:79:6a:e5:bd:3d:56:24:fb:e9:ef:92:9f:4d:29:f8:78:
59:05:f2:72:df:59:6a:74:e7:be:19:24:f6:c0:56:86:0e:2e:
7f:fd:65:bf:e1:9e:fd:e4:ba:be:c4:aa:8c:ed:7c:a8:d6:59:
b8:de:c3:ab:2f:a3:c5:3c:14:9b:c5:21:83:f9:47:b0:d0:c2:
10:58:9f:6f:ae:87:ba:74:1a:64:ed:92:df:24:29:3b:37:7c:
d5:68:8f:2d:16:2d:ea:08:b8:dd:a6:f2:28:14:f8:2c:1d:d1:
39:33:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:39 2025 by rpki-client