Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: QE9MM2/hnUkg6cUPCWrZzSLl3XyBp+h/7YPtSTidx8U=
Subject key identifier: A1:26:7A:2E:0B:0F:6B:D1:97:E1:89:82:D8:7B:A4:25:31:5E:10:72
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019A7149B6C5C6BFDD475766166A0EF15409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 11C3
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: 0M24XNerNBAKSjqyUE2hpMBot3wDmD2D8FaClatGMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:c5:c6:bf:dd:47:57:66:16:6a:0e:f1:54:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=a1267a2e0b0f6bd197e18982d87ba425315e1072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:24:00:86:cc:92:a9:5b:89:0c:17:92:c1:
83:d6:fe:ee:d4:57:b9:67:ac:83:d1:41:71:2c:5e:
ee:fe:4d:17:19:07:8c:6c:57:1b:6d:c9:38:bf:4d:
74:31:b0:ed:5d:e5:72:02:41:97:07:8b:32:e3:33:
1c:88:f5:5b:45:e4:90:df:06:04:6d:ad:2c:93:89:
c2:4e:2d:b8:a8:f1:87:d5:9e:c8:56:74:6c:64:e3:
4b:e0:d5:bf:3a:5f:52:31:f3:9a:79:e7:b2:71:96:
9b:6c:02:68:92:0b:3f:04:7b:d8:3e:b0:d9:a3:7a:
48:30:d4:50:b3:6d:f1:9d:4d:68:33:61:f1:4c:12:
50:5b:57:05:3d:b5:d9:51:94:d3:34:bf:9a:2b:48:
6b:2f:59:10:53:b6:13:f6:f3:bc:85:f0:d1:0c:00:
52:81:a0:48:0d:88:aa:9a:e3:55:d9:2b:93:13:d5:
5f:c3:1c:db:dc:21:83:e9:5a:88:43:d4:d6:36:92:
06:b7:2b:d5:8b:0d:c6:fc:70:39:15:e5:9f:f2:01:
59:f1:c7:51:2d:7e:d2:38:b2:be:d8:f7:1c:c8:be:
3b:f1:90:92:59:6a:16:5f:ae:26:77:bc:d6:78:53:
a8:9e:c5:70:67:01:e0:73:b3:0b:15:42:89:41:6a:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:7A:2E:0B:0F:6B:D1:97:E1:89:82:D8:7B:A4:25:31:5E:10:72
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4f:ac:94:f6:04:ba:a8:f3:01:b5:ec:e8:5b:e3:d1:0e:d7:
ad:fe:9e:fc:9e:a4:94:f8:ad:84:37:70:bd:ab:7c:00:b1:21:
b8:e3:95:90:33:e1:fd:e4:4d:f0:be:13:7c:a7:a6:9a:31:11:
5f:24:1f:3a:e7:87:2e:36:27:07:ae:a3:55:83:fb:17:de:28:
1c:1e:e3:bd:92:8c:e3:ba:a9:b9:ac:64:55:ea:b3:03:05:1f:
6e:74:b0:f3:fa:d8:c1:b2:4c:98:ee:18:79:9b:52:76:44:0e:
1e:34:37:60:41:00:9f:53:e6:3b:d7:bf:a5:fb:db:04:c9:2c:
5d:13:ba:08:91:36:ad:fe:b8:79:92:e1:2b:fb:d0:3f:b2:16:
fa:ed:5f:57:1a:0a:27:3b:26:b6:cf:b1:5b:42:01:8c:69:d4:
60:97:2c:b4:4e:ea:25:79:01:9f:34:32:05:4f:65:e0:76:ac:
fe:96:c3:a4:4c:f6:41:b9:5c:af:01:b6:1f:ac:34:ba:85:66:
da:ca:3b:63:a6:66:2e:30:b7:7b:ab:2d:e0:68:9f:c8:62:c0:
a9:84:1b:53:e2:c8:d4:04:bd:bd:a8:d0:17:fc:8d:2a:2a:43:
9e:00:72:93:bd:29:af:26:8b:47:60:a7:e2:9f:9d:1a:3b:a4:
75:5b:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:11 2025 by rpki-client