Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: LhX+lsRnTM4dcth/5dyp0W7Rvg+6bpjmE9esve8ORGs=
Subject key identifier: AF:00:EE:8A:D2:6E:C8:77:02:03:18:3A:EA:9E:EF:A6:25:AD:2C:87
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 019A725CF04B26410973FA681B92C357AE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 1622
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (hash: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: Fp8MbATHOy9yPQx0J/StpjstoCEOQ4IjMW0ACXdX5lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f0:4b:26:41:09:73:fa:68:1b:92:c3:57:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=af00ee8ad26ec8770203183aea9eefa625ad2c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:cf:01:b9:fa:df:a4:8d:df:e3:5d:a0:23:
3f:ee:21:7b:a5:a8:e1:ec:5c:b7:79:a2:c4:32:4e:
7e:54:8f:b2:ea:2a:e2:9e:21:01:54:9c:5e:9e:76:
a8:71:b1:56:a0:67:5e:98:15:e3:52:47:60:c9:2f:
61:ed:ea:ca:d8:6a:46:06:3e:68:70:2b:55:1b:5f:
ef:81:af:87:6b:bc:3f:91:9d:dd:97:0c:61:ec:38:
51:08:01:cb:16:d5:da:2e:53:05:ac:da:73:a3:22:
79:40:3e:a7:72:8f:47:d7:aa:57:33:91:eb:7a:9b:
fa:33:41:44:a7:33:79:92:1e:be:77:30:74:c4:e0:
98:26:af:f2:96:ed:e5:6e:8a:7a:0d:d1:c7:84:14:
90:aa:3f:ad:d4:5a:de:39:ee:70:61:85:38:9b:c4:
31:f7:9d:79:f3:ac:19:be:36:50:27:e6:4f:8e:39:
c5:ff:9d:9e:66:63:47:13:85:58:02:e2:b8:6e:96:
bf:b3:cd:2f:b3:32:25:99:f2:bc:94:43:cd:8a:f2:
2c:1d:03:87:5d:c8:f6:24:e9:ac:91:41:8c:34:30:
25:15:ce:ed:3d:8a:3b:80:af:c2:44:a0:03:0d:6c:
ac:0a:9f:74:c9:32:b6:52:0f:4b:7d:00:4c:cd:46:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:EE:8A:D2:6E:C8:77:02:03:18:3A:EA:9E:EF:A6:25:AD:2C:87
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:28:f5:9e:e7:d6:27:71:d5:62:50:71:ac:6a:a6:e1:ef:af:
8c:2f:1a:3d:ff:dd:cf:51:da:8d:8b:e1:0e:ed:5d:f7:5b:0f:
02:0e:bc:01:e5:53:67:c1:80:54:5e:e2:eb:a8:34:84:7e:ca:
cf:9e:05:91:45:64:d0:bb:f6:ea:29:5b:2c:83:14:4a:27:06:
e9:53:f1:d8:ca:04:73:96:09:10:a0:ea:3f:b4:8d:42:2d:26:
fb:cc:70:b5:01:4e:d4:4d:6d:94:1a:f9:46:47:ed:d4:c2:19:
c9:c9:0b:f4:dd:c1:4e:4e:77:5b:b4:13:8b:12:37:c8:da:bc:
ff:91:8c:f9:04:be:d6:47:d3:00:70:b0:5d:3b:53:7a:b2:10:
a3:f3:0d:af:59:01:82:35:83:90:f9:ee:6b:2c:08:c7:a6:73:
d7:c2:a2:da:45:94:5d:d8:24:35:98:56:a9:30:04:6c:fd:29:
41:91:4d:e3:b5:b8:36:e1:e7:13:37:77:14:3b:0d:16:76:e3:
a3:e1:aa:42:24:48:8e:d7:3a:04:1f:79:ee:b2:4c:e1:3d:8b:
a8:af:50:f6:ca:6a:07:53:78:12:d2:58:4b:ce:49:2d:31:25:
19:c5:2b:52:c7:d7:9c:4e:1e:3e:2d:f8:3e:fd:84:45:03:cf:
13:c9:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:34 2025 by rpki-client