Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: AaANxXTqiW8lk6M6CAmeFH8uqUiDuczjjTGtRUfMxjk=
Subject key identifier: 71:58:09:B5:E9:0A:45:0F:05:1E:FE:D2:71:CE:CD:BE:9F:C1:3C:8C
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019A2365BD58E191C3477617616395BF747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0DDE
Signing time: Mon 27 Oct 2025 02:01:01 +0000
Manifest this update: Mon 27 Oct 2025 02:01:01 +0000
Manifest next update: Tue 28 Oct 2025 02:01:01 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: JfDCrdM+TTTAekEFpRnMm0iNr1o8asKIvuD7gO7HQqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:bd:58:e1:91:c3:47:76:17:61:63:95:bf:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Oct 27 02:01:01 2025 GMT
Not After : Oct 28 02:01:01 2025 GMT
Subject: CN=715809b5e90a450f051efed271cecdbe9fc13c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:6c:a7:d4:77:c5:74:21:35:bf:e0:15:92:
97:58:f6:29:96:60:cd:e0:15:1a:44:e9:0e:18:72:
8e:c1:47:35:be:40:36:ae:fc:33:94:76:25:15:bf:
46:23:c3:83:7c:10:a6:5c:3e:39:b0:7c:2d:46:e4:
11:5d:66:4b:42:9f:c1:0d:fd:82:94:b7:e2:9a:34:
5c:9b:da:56:61:9c:3c:40:ea:7c:06:69:eb:02:94:
f5:d8:ea:a8:29:b7:9e:0e:28:72:03:4d:28:b6:73:
6d:68:e2:e8:12:62:98:fa:c3:12:76:aa:da:3b:f9:
e3:20:b1:73:f6:40:4f:ad:07:1c:28:d4:f7:7a:6c:
c4:c9:d6:62:57:cf:87:d5:3d:4f:fc:2f:9c:c9:fa:
cd:6f:62:36:18:f6:ad:67:c1:3b:95:70:be:f8:a0:
05:95:82:fc:74:7c:32:85:43:d7:15:be:f9:5a:66:
09:3f:de:53:29:97:04:b9:a9:3f:7b:8d:c2:f8:c8:
d1:58:62:64:4b:18:d8:bf:77:98:d4:18:95:28:21:
2e:59:9f:32:56:3d:ac:b4:df:32:c8:42:fc:59:4c:
80:1f:dc:be:4b:b0:41:bb:a1:1d:20:cd:c0:4c:a2:
02:a9:b0:10:c5:27:82:6b:1a:6c:0d:ff:0b:15:82:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:09:B5:E9:0A:45:0F:05:1E:FE:D2:71:CE:CD:BE:9F:C1:3C:8C
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:11:1a:8e:41:d4:a9:99:83:8e:98:14:bc:11:65:1e:f2:dd:
e1:a6:57:4c:14:3e:4a:a5:f0:38:7e:02:50:fe:43:51:33:07:
8a:96:48:86:08:2f:00:fd:54:06:11:46:8e:31:69:07:b5:31:
d4:cb:be:1f:fd:df:c4:7f:a2:4c:59:40:00:6b:f4:28:5e:bd:
36:cd:e2:d7:d3:22:d8:ca:be:0a:1b:7a:20:da:ea:8b:57:dd:
3d:79:8d:40:d1:73:9f:65:73:83:84:bc:5a:10:d6:5e:82:cc:
34:b5:52:cf:da:2d:6c:89:dc:a8:23:6d:50:1f:8a:28:18:8f:
4b:72:69:77:d8:0c:4a:41:c4:b3:78:90:01:95:d6:f8:a1:45:
6d:03:a7:9f:77:fa:68:a9:13:fc:fa:16:16:68:ef:7f:27:cd:
34:b2:89:0e:a1:7b:d9:fc:e7:db:b6:a7:22:31:f2:d4:41:bb:
58:87:77:16:94:6e:5f:cd:71:c3:83:ee:a4:c0:b1:12:6f:ac:
7f:79:fa:7d:ac:5f:94:cf:93:86:6c:53:f1:0d:f9:12:24:d7:
6d:75:f3:86:ca:0b:c6:2e:1d:e8:9b:e7:4c:0e:50:2b:a6:84:
7e:56:c5:5d:2f:fb:4b:2c:74:a3:ea:ef:87:ac:a0:26:35:d0:
2f:80:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:48 2025 by rpki-client