Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: Cnu2A7EHCJ3CmaibzkpGqyXtZYthyfAwcaTq9vTwesQ=
Subject key identifier: D8:FE:84:19:3D:A1:51:E6:17:24:62:54:42:30:92:08:E9:ED:78:0D
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 019A722644723813901B55D890823783AA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0D12
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: 8ljiqjtxcxrDCN2OXE3beYBb4jlTVWMkUBfSDn022eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:44:72:38:13:90:1b:55:d8:90:82:37:83:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=d8fe84193da151e61724625442309208e9ed780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:65:9f:f7:b9:98:b8:4c:9c:69:a8:a4:15:
05:33:e6:8e:7b:f9:af:6f:f3:ae:e3:87:be:85:5a:
65:01:de:bc:c2:7d:0e:b9:e0:98:78:ea:fc:9a:4a:
6a:dc:fe:57:b4:39:b2:49:df:14:93:31:4b:20:96:
e6:b6:03:1a:18:e6:e5:45:35:93:13:e6:82:b0:42:
65:36:b9:e5:c0:07:11:03:3b:9a:69:c8:8e:87:fb:
d5:c7:9f:43:3f:57:bd:82:33:68:11:d9:9e:e0:90:
4f:4e:12:d4:dc:e5:4e:ef:c0:78:cb:bd:ad:9e:a8:
ef:c5:cc:49:f3:c3:e8:a3:db:53:3d:29:d0:8e:23:
4d:e9:2b:98:2c:75:db:99:22:7a:96:1c:53:97:f6:
18:2b:3a:38:c5:18:0f:9e:07:5f:92:9f:5e:0d:d9:
77:cd:a1:aa:e7:2e:6e:d2:b0:a1:6b:d8:0e:ee:19:
e3:ec:1d:79:10:2a:1e:76:50:af:29:ae:4b:58:85:
1b:87:d6:10:2d:7c:c0:33:9d:b4:47:d2:1c:e0:10:
ac:41:00:45:1f:05:6c:a0:be:b5:97:d6:66:d2:76:
00:b3:3f:0b:78:bc:e5:7f:19:66:0b:3e:66:4d:d5:
2b:00:a8:5c:a5:1e:6d:f0:01:8c:ae:6b:40:ae:7d:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:84:19:3D:A1:51:E6:17:24:62:54:42:30:92:08:E9:ED:78:0D
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:22:5e:94:e1:1e:dd:78:db:2b:23:d7:bf:bd:97:40:f2:eb:
0e:63:be:4c:4b:20:37:b6:1c:8e:1f:ac:94:61:1a:e3:4f:d0:
93:99:a1:60:1c:eb:c7:31:af:1e:1e:f5:06:80:34:0a:77:8b:
41:a9:15:a8:bb:98:53:3e:bc:8e:e2:18:12:44:8a:1a:26:67:
95:84:48:04:9e:e8:cb:5e:16:37:b9:ba:ca:c0:86:54:fd:fc:
fa:69:9d:82:e9:6e:ff:4b:0e:7a:e2:8f:e4:31:d3:ab:53:2d:
8a:5b:a0:41:9d:dd:d7:7e:9e:24:b6:e7:b9:7b:0f:fe:a2:57:
20:42:af:12:2a:3e:48:e5:4c:66:cc:68:7c:0d:8a:0c:c0:d2:
5e:d5:3d:ea:c8:bd:97:76:f6:73:a4:93:b5:c1:42:93:9e:35:
64:70:30:43:f5:2f:c7:ca:97:e0:04:d7:a2:e6:6c:91:0a:e8:
4b:b3:4f:2c:0e:cb:c5:6e:5c:1f:56:9f:2f:42:59:35:d1:5d:
b2:2d:47:86:d7:0e:57:d9:aa:d1:3b:92:95:d1:5b:de:e2:00:
5c:5f:58:e6:46:f8:a4:4f:05:7f:a0:a8:95:c8:17:63:42:7a:
e4:18:95:d5:2d:cd:1e:09:4c:b7:35:cb:ad:73:16:fe:9c:62:
80:94:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:52 2025 by rpki-client