Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: 6CcNFSDX6aW1Yi2Gg4GCIACa5tCLUe6pPRKHepeExuc=
Subject key identifier: 7C:66:A6:D4:1F:10:D3:D9:7F:36:D7:72:6C:56:D6:76:8D:EE:33:64
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019A706E31AE46E914B7C234C6A964A53483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 06AF
Signing time: Tue 11 Nov 2025 01:01:01 +0000
Manifest this update: Tue 11 Nov 2025 01:01:01 +0000
Manifest next update: Wed 12 Nov 2025 01:01:01 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: 9Vj9hYAHoK/B2bnScwsM8pTsiZ1QC6/7VGz4oQg+JQo=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:31:ae:46:e9:14:b7:c2:34:c6:a9:64:a5:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Nov 11 01:01:01 2025 GMT
Not After : Nov 12 01:01:01 2025 GMT
Subject: CN=7c66a6d41f10d3d97f36d7726c56d6768dee3364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:8f:32:d4:be:b1:77:bb:27:62:3c:ca:21:
e4:a4:ba:69:23:8b:4e:b2:1b:b8:f4:e2:48:70:b1:
a4:bf:ef:71:10:92:5e:eb:a9:66:9f:a9:80:76:4d:
c6:6a:b8:e8:36:78:2b:a9:ec:6f:6a:4d:e6:7d:b1:
ab:68:ef:3e:ae:8a:e1:24:f1:e1:62:68:7c:35:51:
2f:19:41:db:5d:c9:c8:40:45:a6:33:33:cc:99:86:
1d:50:a7:72:e8:60:25:68:69:3e:f2:48:e0:97:82:
8b:17:8e:f6:41:55:c7:8a:f2:af:3f:df:ae:bc:71:
cf:00:17:13:16:45:1c:e0:51:2b:07:d3:44:e1:49:
ef:ee:5d:5f:57:b7:76:92:c3:50:b6:13:44:e7:9a:
8d:8f:d8:52:66:e6:56:20:82:a0:37:79:b2:4a:48:
01:02:cb:d3:9b:67:c9:1e:e2:9d:61:65:9c:2d:77:
c9:83:56:e6:c2:13:27:e2:78:f8:86:6c:ff:b2:d3:
a8:aa:f9:a5:e6:a8:fd:48:e2:78:97:37:69:ed:58:
c9:f6:5c:1d:7c:cc:d4:cd:f8:15:76:2a:f9:d0:53:
0e:eb:48:80:8d:27:a4:58:d9:71:da:75:21:b9:76:
92:33:d0:5b:cd:66:45:a8:68:0e:1c:be:56:fe:d7:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:66:A6:D4:1F:10:D3:D9:7F:36:D7:72:6C:56:D6:76:8D:EE:33:64
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:71:41:90:4b:38:72:6f:b1:ed:00:f3:bd:5e:3a:5f:9a:
34:0f:ab:00:0c:6a:84:24:c5:b9:b1:98:bd:8a:df:67:0b:90:
3f:0d:cc:bd:e0:8c:cb:f1:5d:a5:fd:e2:4d:96:e5:cc:a3:80:
14:55:a6:82:8e:97:f6:ca:78:06:24:a1:0a:2a:71:85:3c:33:
bd:21:e4:2a:67:fb:d4:b0:ef:3c:2a:f3:da:ce:08:4a:e8:ce:
e4:b3:25:03:f8:67:70:92:f5:4a:ce:52:5c:76:e1:df:bd:80:
0e:fe:c0:18:d9:d7:cd:25:a8:a7:51:02:86:39:60:c6:ce:99:
fa:6f:f3:4d:fb:ce:a8:25:19:1e:07:06:66:19:c1:3e:b2:ba:
22:b3:e3:55:1b:a5:a6:54:cc:4e:ef:59:c4:d9:97:62:73:4c:
94:2c:45:cc:b5:9d:cb:97:57:02:10:c9:9c:55:c0:ae:fe:cc:
32:70:05:3c:65:03:4f:3f:ee:66:3c:96:00:62:04:0b:45:77:
a3:04:8c:58:85:b6:55:20:0d:cb:8f:b7:5e:de:36:52:26:e2:
e5:ec:97:4c:13:5e:f1:f8:ba:c9:63:f9:fe:02:66:74:73:57:
0c:40:2b:08:b9:ec:67:7e:34:87:97:22:25:2f:25:d7:1e:0d:
af:95:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client