Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: bMV1S3v8gZDHrHN3H2LAgp5oSypaH3khtl1azxKZO2c=
Subject key identifier: 10:67:28:A4:45:3C:B1:4D:1E:10:94:98:DE:A5:3F:5D:C8:10:81:91
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019A24E5E34DC1BF22937C94160EC62FAEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 16CD
Signing time: Mon 27 Oct 2025 09:00:36 +0000
Manifest this update: Mon 27 Oct 2025 09:00:36 +0000
Manifest next update: Tue 28 Oct 2025 09:00:36 +0000
Files and hashes: 1: RkNSHPxeGyuQWaphLZeft9rG6t4.roa (hash: c7vEvcPCr8KpDOxbqsIVXnfktutvPBP6mswtibwiwTc=)
2: Yh__IxotubMeOa82sMvmQUaBHl8.roa (hash: E16zbGBIdZ2QaT6+6cP2+s5Eumca3TcRDTuXCjFf19A=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: K9Pt1hAMSaD0qRZyKUxqwT4TtTsOwPtSyk3Gf+jkWqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:e3:4d:c1:bf:22:93:7c:94:16:0e:c6:2f:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Oct 27 09:00:36 2025 GMT
Not After : Oct 28 09:00:36 2025 GMT
Subject: CN=106728a4453cb14d1e109498dea53f5dc8108191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:37:b1:2a:05:ad:c8:63:ab:4d:c4:3f:6d:
f7:9a:06:61:ef:22:20:66:5e:52:95:59:86:f7:09:
c0:9c:50:6a:15:12:07:77:e8:7c:4e:b9:dd:0a:c4:
eb:6a:d7:e8:5a:f3:b0:60:1d:81:e9:15:e0:9f:e1:
d8:37:d3:69:9b:2c:45:bf:8e:b7:4a:8d:4c:0d:f8:
c0:4a:2d:3a:8b:53:9a:b0:b6:a9:28:9c:14:14:ff:
6f:56:49:1b:4b:6a:7b:f3:2a:51:00:aa:07:af:c6:
98:9f:71:0c:e1:9a:44:80:10:59:74:fd:b2:fb:5b:
8a:b5:32:40:36:c6:08:70:f2:74:dd:a4:84:e5:85:
38:69:92:e8:e3:f5:17:3d:6a:50:45:7c:63:cd:80:
4d:70:14:b1:b7:74:4b:c4:18:be:5c:5b:7f:e6:83:
7e:c2:aa:22:a9:1d:f5:f6:9f:6d:5f:ba:ae:3b:be:
49:3b:d5:ad:a7:7e:d8:46:dc:6e:1f:e6:12:e8:eb:
b4:41:90:af:31:29:c7:d1:44:15:95:a4:56:dc:d9:
83:b1:c0:70:7b:68:bd:7f:6f:b9:45:32:74:8b:a2:
16:ab:1b:45:e3:26:88:fc:02:b3:22:2b:31:47:65:
9d:a8:8f:b6:59:77:cc:2d:22:80:77:95:8c:3c:e5:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:28:A4:45:3C:B1:4D:1E:10:94:98:DE:A5:3F:5D:C8:10:81:91
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:62:58:a4:67:d2:9b:68:4a:6e:cb:cd:f2:b1:20:ea:06:
50:79:cd:56:bc:eb:3b:85:69:1f:e2:73:bd:b9:1d:54:1c:8f:
22:74:a2:3e:7e:9a:8d:aa:80:42:aa:bc:8a:74:5e:09:25:74:
99:b2:9a:e2:df:54:bf:5d:12:27:9e:98:ca:50:37:d6:bd:08:
e9:ff:05:f6:4e:b0:b6:64:3f:2f:ca:a7:f2:e9:fc:25:74:47:
24:4a:5c:e3:58:1c:1b:40:b6:68:2f:2c:76:03:66:c5:65:6e:
6e:0b:ce:45:4f:86:ab:e9:d7:0f:e5:2a:60:9e:5d:7b:65:13:
70:92:42:39:de:df:ec:1c:a7:c3:02:60:a7:1a:0e:b7:14:dc:
f1:11:49:11:e9:56:a1:f3:7f:10:e5:a8:fa:be:9a:9b:db:23:
6d:ec:c6:59:a4:48:08:0f:30:43:1d:cd:7c:2a:47:57:4a:16:
34:03:a0:f1:d6:5a:b6:30:94:8e:21:bd:36:1f:5e:d9:89:dc:
2a:d4:68:e7:98:3b:22:d7:c4:79:bc:ba:ed:35:72:04:af:46:
e4:6d:30:32:a8:4a:37:74:cb:a7:6e:14:c0:2e:4d:f6:df:40:
d8:99:81:8b:17:1d:e2:b2:db:e8:95:22:70:4d:10:d2:6d:5a:
e4:b1:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:38:41 2025 by rpki-client