Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: 2icO8nIHPVaG0dl5NxmRIEqF0zE6eGtmvUkRhA1OTXA=
Subject key identifier: A2:4A:7D:DD:14:8E:C8:68:E3:6A:43:5E:3B:EA:61:D3:13:05:DC:E0
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019A202D599EFBDD4566EAED64B9A479B371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 06AA
Signing time: Sun 26 Oct 2025 11:00:34 +0000
Manifest this update: Sun 26 Oct 2025 11:00:34 +0000
Manifest next update: Mon 27 Oct 2025 11:00:34 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: lgBMmV5c7LebNWISDOAJpANN7UFumRwdlaiqJmDxxr8=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:59:9e:fb:dd:45:66:ea:ed:64:b9:a4:79:b3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Oct 26 11:00:34 2025 GMT
Not After : Oct 27 11:00:34 2025 GMT
Subject: CN=a24a7ddd148ec868e36a435e3bea61d31305dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:f6:9d:7c:59:ec:22:cd:5f:74:c7:34:8f:
1e:9e:9d:3f:cd:ce:ae:b3:2d:f8:4e:85:4f:2d:b1:
7c:1a:5d:e3:fe:fa:c2:d0:70:91:ea:31:39:4b:4e:
7d:bb:04:d4:28:2e:62:ae:d3:ac:f4:22:11:66:68:
89:16:66:b2:4f:68:07:1b:89:9f:3d:4f:cd:8e:4a:
6b:ff:90:2f:19:a5:cb:61:35:9b:dd:2a:3e:bc:39:
53:44:7f:e8:51:dd:19:3d:43:41:56:b1:fe:8d:91:
f3:f4:90:cf:2d:4f:97:81:55:40:09:92:91:a5:03:
27:22:8a:22:ac:f4:86:f6:95:88:a3:8d:80:b7:9f:
c1:c4:b7:72:84:8e:09:13:7c:7e:7e:ec:80:11:5f:
f4:a5:6f:40:91:52:03:b5:87:09:a0:9d:ee:4d:9a:
f8:79:8c:6b:4a:e2:3d:ae:cf:b4:fb:9c:7c:07:13:
0b:cf:b4:0f:a4:79:0c:87:d0:c1:12:66:e2:51:9a:
5b:d3:04:67:dc:29:dd:0b:59:52:39:c4:2a:23:e5:
bf:22:96:82:96:0f:58:47:f0:8a:30:26:cf:18:6b:
32:3d:3d:14:d5:e9:c3:17:9c:9b:29:08:a7:1d:0d:
ee:1a:ff:71:ec:54:45:dd:ec:e2:16:05:09:b0:ed:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:7D:DD:14:8E:C8:68:E3:6A:43:5E:3B:EA:61:D3:13:05:DC:E0
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:df:3c:a1:db:76:a4:f3:5e:75:3d:16:ee:52:f3:32:b6:
fb:90:67:6a:6f:90:ed:7e:38:a8:be:a9:a5:8c:33:76:b1:9e:
94:a6:74:c4:b3:7e:38:d9:c5:99:38:d1:63:f8:7e:ae:48:4f:
f0:a8:2f:43:fb:96:e2:fc:5b:ba:17:d5:0b:60:9c:74:ba:eb:
dc:22:54:4c:55:05:35:4a:2c:c4:41:f8:bb:07:03:64:f4:89:
19:64:8c:55:5d:33:57:f4:ae:0f:f0:38:a8:95:79:9d:2c:f2:
c4:d6:3c:88:e6:2f:6b:74:1b:71:10:f0:f2:84:ac:8f:f9:25:
e9:fd:04:22:5b:ac:e7:75:9d:1d:2b:31:a7:6c:f3:89:30:f7:
51:ae:6e:c6:5a:18:84:5f:6e:68:96:98:e0:20:5f:46:a5:94:
e0:0e:14:7c:c5:92:fa:be:93:9f:9d:4d:e6:4c:2c:42:4f:8c:
69:65:c9:0d:fb:56:ed:88:b1:2a:9e:d7:73:9a:b8:bd:ad:9c:
b9:e2:7a:0f:a5:84:bd:2d:6b:b6:ba:2e:fb:16:0b:f6:c4:f5:
8e:4a:f1:92:6c:7f:7f:a8:c0:04:34:a7:f0:03:03:29:5b:31:
b3:56:4d:da:e7:b1:1f:ae:ec:e1:04:1f:e4:d6:c9:97:29:fd:
72:49:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:08:24 2025 by rpki-client