Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: krO1QmCGUNs+c33uf1nEQO2sLql6cqzFXSyn2MkqQZ8=
Subject key identifier: DE:71:78:E7:AA:6B:3D:4D:FD:71:95:F5:F9:5C:31:BF:6D:0A:C5:77
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 019A736EF3CEAABAD6D9A21C2CCB2CB74F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 0108
Signing time: Tue 11 Nov 2025 15:00:42 +0000
Manifest this update: Tue 11 Nov 2025 15:00:42 +0000
Manifest next update: Wed 12 Nov 2025 15:00:42 +0000
Files and hashes: 1: MXRadGpzqEbp0mkxJfqHUigmWBA.roa (hash: wm6CRKGDQ4Q1PS4u4levZbaZ8tcUlI9RmOi9JQKCpTM=)
2: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: TM9hiAFm61BMcmeYfVicMAkQxAa73BZKOHBo+Dmx0Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f3:ce:aa:ba:d6:d9:a2:1c:2c:cb:2c:b7:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Nov 11 15:00:42 2025 GMT
Not After : Nov 12 15:00:42 2025 GMT
Subject: CN=de7178e7aa6b3d4dfd7195f5f95c31bf6d0ac577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:c0:a3:46:d8:55:bf:83:73:52:aa:6d:4b:
0a:44:ee:4e:c7:ab:19:d9:4a:81:80:90:eb:49:58:
23:88:85:06:d8:c7:f1:63:04:f4:82:3d:2b:f4:3e:
84:9e:31:50:a7:80:75:8c:2e:0c:c8:2a:0f:8d:55:
86:a1:47:7a:ee:95:2d:db:bb:a7:dc:e1:85:00:f8:
d5:80:00:3e:a3:23:ff:e4:0b:6b:2f:0f:e5:6b:95:
83:45:79:60:e1:61:bd:35:b0:98:57:3a:52:ee:c3:
0e:f4:96:2d:9e:38:f3:29:7e:3a:78:01:23:82:29:
8c:18:81:d9:b7:3d:ac:a9:69:6f:ed:54:63:58:db:
1a:84:72:97:f5:56:48:c6:73:ca:bc:fd:d9:b5:24:
4f:c7:0c:41:ab:6a:bc:31:97:d2:8a:1a:e6:37:b9:
47:0c:fa:bb:20:d0:89:d1:78:ea:1b:5d:3e:da:74:
95:ea:98:79:f6:7b:4e:7d:d7:37:40:6a:8a:cc:12:
d2:6d:e4:c0:02:de:68:f8:d1:15:25:27:9b:54:22:
b7:0a:e4:eb:16:f1:e1:d8:31:24:db:d8:6b:b2:ef:
22:d1:c5:43:e7:3b:97:be:63:c3:28:ea:38:6e:6b:
fb:d9:af:ad:7f:a5:e6:7f:26:ad:11:ad:2a:91:9b:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:78:E7:AA:6B:3D:4D:FD:71:95:F5:F9:5C:31:BF:6D:0A:C5:77
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:14:3b:94:30:c4:cb:3a:7a:75:75:e2:46:13:c8:db:46:ef:
eb:59:cd:b0:d9:6e:17:57:0f:1a:93:f9:1d:db:ea:de:a8:be:
ed:85:04:c6:05:9b:66:2d:d7:5e:06:e9:b9:f2:b3:49:26:f6:
a0:16:30:5b:cb:fc:7b:65:97:74:17:f5:03:64:eb:88:3f:56:
00:92:0b:d0:56:34:69:ec:42:40:76:d6:08:93:bb:7b:9f:73:
60:b5:86:07:78:da:e5:8f:cf:70:b2:61:4a:a7:a0:7f:d3:ac:
0e:c7:ec:d1:71:bd:78:c1:56:78:a4:3d:cc:12:8e:94:e3:55:
37:cb:8f:2e:4f:a4:71:99:64:0e:38:74:ba:33:00:68:d3:c1:
c9:02:46:cf:fd:62:d4:81:84:da:f8:07:9c:af:53:fd:be:5c:
e7:75:ad:2f:c2:30:42:a1:04:16:1f:d3:3e:39:a9:82:f6:ee:
e1:cd:10:ab:e6:8a:a6:e5:12:00:1d:d9:a3:b9:77:9c:71:9c:
49:56:cb:d8:de:05:0b:99:86:c9:b3:1f:c0:0a:41:25:4c:29:
71:57:3d:47:c7:5c:1c:26:4b:57:38:96:f5:de:68:bc:ce:58:
df:8d:f2:7e:db:bb:d8:55:ee:f3:78:3d:56:25:c1:ae:54:67:
90:2c:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:06:44 2025 by rpki-client