Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: fvbpqHkSzpIs/S0cWzdQeNXsRMEHYCdDK1PG5MoZ8Dg=
Subject key identifier: 32:E8:22:59:56:4D:FE:15:BA:52:D1:EF:C9:16:63:F7:BD:44:B4:61
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 019A232E94FB323E85E4D1FEE5D4B576801E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0DD7
Signing time: Mon 27 Oct 2025 01:00:46 +0000
Manifest this update: Mon 27 Oct 2025 01:00:46 +0000
Manifest next update: Tue 28 Oct 2025 01:00:46 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: lF4eLaQ5hunKwUe5DCTRRqfSSH7SYqkN5MPFVQOT5XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:94:fb:32:3e:85:e4:d1:fe:e5:d4:b5:76:80:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Oct 27 01:00:46 2025 GMT
Not After : Oct 28 01:00:46 2025 GMT
Subject: CN=32e82259564dfe15ba52d1efc91663f7bd44b461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:de:63:fd:78:f1:53:a2:26:54:e0:f4:46:
e4:c8:f3:95:5c:26:26:e0:39:a0:87:f2:3b:b2:6e:
4a:72:08:46:5d:81:3c:54:da:09:84:57:14:98:2d:
19:cc:0c:19:d0:0d:39:47:47:f1:38:c3:c1:de:2a:
61:29:c3:7b:2f:46:7a:3c:de:bb:54:b1:5d:34:99:
1a:d1:56:51:47:1b:1e:02:f4:ae:92:52:6a:4a:15:
c6:91:31:a3:bd:ed:19:33:7b:71:8a:bf:f8:1d:7e:
29:34:4f:05:ca:8e:bc:15:32:35:86:eb:16:1a:cb:
46:be:c5:41:a5:d5:cb:53:21:d9:85:2c:7b:32:5f:
1a:a5:71:e4:e2:8b:61:4c:74:2b:21:4c:f9:21:0a:
e9:f0:b3:59:61:55:61:8f:ce:96:98:0b:52:df:fc:
19:69:4f:c8:c9:1a:ee:2b:19:78:a6:46:79:c7:82:
48:b9:18:fe:fd:dc:1c:fc:e0:c1:28:a2:8b:0d:b9:
87:0b:8f:f2:98:e2:c1:7d:71:a8:cd:2d:47:87:51:
ac:21:2e:87:90:e3:65:81:89:91:02:f2:f4:aa:03:
bf:bf:b3:a6:f6:51:29:83:b2:3a:2d:0c:ed:ac:ac:
59:12:62:ae:88:32:03:4b:58:14:8e:10:49:9f:df:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:22:59:56:4D:FE:15:BA:52:D1:EF:C9:16:63:F7:BD:44:B4:61
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:d7:24:b8:0f:f9:25:1f:7c:4c:e3:d1:6b:6b:fc:89:46:
f1:65:7e:9e:f9:82:24:7c:c9:6b:5e:3f:ea:fe:48:ac:c3:14:
c0:af:30:fd:19:0f:fb:da:16:bd:e6:7a:58:e7:99:b5:2d:1a:
ea:b0:c2:34:3e:f0:8a:ed:98:3a:f0:c2:1f:95:9e:7c:bf:dc:
33:64:74:ed:e6:c5:b7:f3:96:7b:f6:3a:18:6a:0e:8a:59:fa:
8c:f9:1e:61:87:de:a9:79:2b:cd:c0:d7:de:04:f0:eb:18:a3:
ed:24:56:e5:5d:3e:43:61:27:80:e0:72:44:eb:2b:c5:07:ec:
7d:c0:dc:b6:29:02:3b:7e:f2:5a:0f:86:2e:52:ed:78:03:f6:
09:68:e4:9e:61:a3:a0:84:ae:15:2e:b3:77:83:2c:01:28:1c:
94:70:cb:db:94:24:41:a0:e3:4b:4b:de:5f:24:9a:ac:06:9c:
a0:68:87:bd:fb:73:f9:9c:31:99:8e:e3:35:2a:37:5f:f6:c5:
ae:81:41:24:4e:96:41:86:82:67:e8:b5:e9:f2:c8:a8:83:a1:
02:f5:70:b2:e9:9d:1a:d1:2d:1a:b4:da:ec:29:26:2e:09:42:
c6:db:f4:57:e6:fc:ef:be:72:60:e3:3b:aa:b7:7d:ed:24:72:
42:01:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:21 2025 by rpki-client