Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 1bItT7n4A7oVanxaWY8KXL2lEBEW5V8Ejxu2NoEWcmk=
Subject key identifier: 0C:99:0A:37:1D:84:BF:A2:62:80:C5:D9:B1:8F:47:67:CC:3D:D3:05
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019A25F84CC76C87CFBC2E1BABA6A15ECC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0411
Signing time: Mon 27 Oct 2025 14:00:20 +0000
Manifest this update: Mon 27 Oct 2025 14:00:20 +0000
Manifest next update: Tue 28 Oct 2025 14:00:20 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: Oux5rI44+43rGQ6B7Bihn2Ytwc9S5l8Zl5WTW4SAV/s=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:4c:c7:6c:87:cf:bc:2e:1b:ab:a6:a1:5e:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Oct 27 14:00:20 2025 GMT
Not After : Oct 28 14:00:20 2025 GMT
Subject: CN=0c990a371d84bfa26280c5d9b18f4767cc3dd305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:13:91:4a:13:ac:ae:50:4a:5a:c1:b6:84:
a5:4f:46:e2:38:4e:a1:f7:10:af:91:e6:2f:11:19:
26:31:0e:93:87:8c:cd:b0:03:03:e3:f7:79:15:64:
c0:6c:64:8c:e3:90:f8:11:1d:30:4d:76:b5:d3:53:
2a:63:a1:1e:c7:ff:e6:34:e4:86:02:36:45:94:77:
3e:c5:d5:24:33:e9:91:2f:84:a6:1f:8a:1d:6e:38:
54:19:6e:e3:25:2d:b7:9d:ed:92:25:4c:bf:69:c9:
a5:2d:7e:c3:9f:a8:57:b3:6b:0d:23:97:b4:a8:20:
bb:bc:22:de:25:de:e7:fe:e3:80:d1:c8:5b:0d:a2:
a8:f9:b3:1f:9a:2e:86:90:c8:d9:0f:29:9a:d6:e3:
78:98:8a:cd:8e:4c:8c:12:ad:8e:65:f8:41:30:88:
f6:38:4c:a6:b0:de:3d:21:64:08:c4:1e:d4:9b:6c:
2a:67:a8:ae:90:37:5b:32:c2:95:7d:a4:02:c6:17:
8e:39:b0:58:6d:2d:21:f4:ba:6e:07:bf:9c:c0:c9:
ff:7d:7f:36:90:1f:66:2e:25:72:a4:e0:0d:53:15:
6b:be:98:a6:50:b7:78:cc:52:5d:42:61:9f:ba:44:
4a:00:89:dd:42:2d:5b:e7:eb:ca:21:da:9a:49:6d:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:0A:37:1D:84:BF:A2:62:80:C5:D9:B1:8F:47:67:CC:3D:D3:05
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f7:b8:99:64:ff:df:cf:dc:17:83:4f:56:30:73:5b:91:75:
81:4c:ee:4b:7c:88:cc:dd:fa:2f:e0:18:8e:e3:c4:96:21:f6:
41:e2:71:5f:89:17:6e:2e:8a:ec:90:1c:92:7d:c6:76:d8:55:
a3:92:84:35:88:ca:dc:2a:46:fc:ff:a1:76:ee:ef:f4:91:14:
63:ab:9d:ad:ec:f9:61:97:9f:3d:b0:c6:6d:76:98:50:91:38:
32:b7:34:20:89:c9:30:89:82:be:b0:bb:f3:58:7e:84:36:1c:
7c:ab:95:75:66:a5:69:59:a3:63:ac:cb:f3:a5:6a:e6:a2:0d:
e3:ff:0a:9d:e2:0b:cc:7f:85:35:f0:6a:8f:86:0a:17:28:b1:
5f:bd:90:c0:f7:8c:6f:ca:fe:72:2a:b0:c9:e1:f9:57:fc:93:
dd:98:13:48:d9:23:c6:6b:68:24:3a:6f:ba:3f:d4:3c:b9:a8:
c5:36:ee:53:62:9a:32:24:e6:37:f3:5b:2f:e7:ce:68:97:0e:
80:07:75:3f:d3:01:18:af:ee:36:b0:fa:c4:5a:cf:bb:ad:f3:
8e:1b:98:fd:6f:12:59:4c:97:70:15:24:9c:bb:98:ab:ca:b9:
5e:3d:e3:18:11:eb:53:8e:d3:ab:1f:af:27:d4:bf:7e:b1:16:
19:25:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:16:00 2025 by rpki-client