Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft (raw, json)
Hash identifier: 2mIdfRK+juWaVvnv3U9tz5sRsAk+LG5F/BTBnQtbl2g=
Subject key identifier: A1:3B:68:83:2E:FE:AC:72:27:55:96:76:1B:D1:74:A7:CF:21:49:18
Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6
Certificate serial: 019A725CB64135BBD4E770BB45B5A6827B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
Manifest number: DF
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl (hash: wyOV3lmzDPsPG3qdUOlUxa4kmDCGHY4RyqEkwR+Od0s=)
2: nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa (hash: DqkhFi8/nJkoAICivrur3pXP8/0mP1960uQN7oDPzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b6:41:35:bb:d4:e7:70:bb:45:b5:a6:82:7b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=a13b68832efeac72275596761bd174a7cf214918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:f1:d3:61:46:3c:52:5c:c9:f5:e3:aa:d1:
05:b8:84:84:7b:69:7c:bd:9a:f9:4f:c8:67:fc:6e:
e2:0b:d8:8a:fd:d3:a7:d8:a3:c5:24:ae:85:4f:f5:
8e:06:a7:e0:74:04:08:19:04:f0:52:55:5a:0e:98:
ec:d4:2f:61:b6:bb:19:d8:57:15:84:6e:97:cb:01:
f6:da:bd:97:57:2c:4e:dd:ff:8a:6f:b0:f7:c6:10:
9f:bf:0d:ae:8b:39:4d:6c:81:d9:f0:b1:cb:a3:59:
82:20:2d:79:0e:de:29:f2:65:fc:73:cb:97:89:d4:
ab:7d:88:11:2a:48:32:77:fd:b8:0e:28:25:94:fc:
77:16:db:1b:48:d6:b1:e7:91:e8:f1:58:91:2d:4b:
41:58:af:36:7b:b9:fd:f7:fb:49:8b:6d:b1:f5:b7:
65:0f:54:3b:f1:80:42:85:04:27:3c:ba:e8:fe:f1:
02:fb:7a:25:65:3b:0d:85:d7:c2:b5:62:3d:41:78:
55:28:4d:13:67:0b:0b:68:6c:e3:d8:cb:32:2f:e8:
78:87:c7:2e:90:f9:ac:40:2e:33:fa:ed:a3:d3:d2:
80:dd:93:72:3c:86:9b:0b:1a:cd:c0:59:a7:ca:c7:
ec:94:92:d4:6b:01:1b:28:6d:0f:2c:2c:1a:60:01:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:68:83:2E:FE:AC:72:27:55:96:76:1B:D1:74:A7:CF:21:49:18
X509v3 Authority Key Identifier:
keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:79:2c:cb:94:8c:c7:35:85:ab:be:86:a8:02:1b:8b:38:
32:04:b8:9d:d5:4b:09:07:0d:be:ea:c9:86:05:21:6c:c6:17:
8a:5d:3b:9c:23:a7:15:bb:6d:9e:66:4b:be:76:1e:1d:00:4f:
83:9a:74:53:8d:e7:bb:af:b2:b6:5a:7a:8f:e0:73:ff:6e:db:
8c:2a:6f:32:c0:89:65:1e:48:cd:31:c9:b8:de:9e:22:ae:12:
98:d4:78:4d:a8:f7:a3:0d:e3:04:5a:0d:6b:d6:c6:cb:70:07:
23:06:57:87:de:c7:91:dc:6b:00:17:59:94:a8:ec:10:a9:9e:
72:17:e3:ed:d3:ba:31:af:a7:39:9c:39:fb:c7:6c:1a:1b:17:
eb:99:36:d5:21:8b:e1:ef:63:54:c5:7b:24:70:b9:f6:6f:d2:
32:17:e2:08:17:c0:11:51:7e:19:81:63:97:3c:8a:94:da:be:
a1:a4:d9:b8:e4:37:bb:83:7a:31:1d:6d:ba:ee:58:fd:ef:92:
b0:38:bc:91:18:3e:0f:1d:97:26:54:95:f9:28:bc:eb:23:16:
f9:14:68:8e:3c:17:03:4d:4f:68:f8:f5:df:37:72:a6:b1:cb:
83:27:8e:95:2f:d0:d0:59:67:fb:37:6f:0a:bf:9c:f7:5b:f4:
75:12:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:58:59 2025 by rpki-client