Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: gF5g71PJbzK1pUtxV8cLMaAEagpNDdRhgfrR+JOIOUk=
Subject key identifier: FC:ED:C6:23:E6:E9:56:80:C7:5C:CB:C5:A7:58:B1:79:13:3D:E4:97
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019A35D990765513BEDC93AB91C1C6D9544C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1703
Signing time: Thu 30 Oct 2025 16:00:41 +0000
Manifest this update: Thu 30 Oct 2025 16:00:41 +0000
Manifest next update: Fri 31 Oct 2025 16:00:41 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: ui7pyyjhJj1n8w9LrTfjd7XULnCMmnm2FfbAzAjrEFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:d9:90:76:55:13:be:dc:93:ab:91:c1:c6:d9:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Oct 30 16:00:41 2025 GMT
Not After : Oct 31 16:00:41 2025 GMT
Subject: CN=fcedc623e6e95680c75ccbc5a758b179133de497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:a7:70:e7:fa:7d:bd:90:03:75:33:d7:a9:
8e:53:b6:20:b6:03:d5:14:1b:3b:e5:4e:43:6f:8a:
ed:4d:66:53:cd:75:48:4f:66:16:e1:93:67:67:07:
27:43:7e:a4:62:f1:59:1f:2d:9d:8e:cc:49:e9:ba:
31:a0:95:38:1d:d3:2f:72:07:14:84:77:d4:f1:6d:
86:71:02:03:c9:db:67:4f:69:95:0c:13:fa:26:8d:
10:d4:f8:e1:31:b7:76:11:e0:8b:51:c1:4e:d4:fb:
79:17:0d:63:d2:65:ca:05:03:f0:12:cc:5d:3e:aa:
57:ed:c3:39:c3:45:0e:45:b7:14:4e:ce:59:4b:59:
73:26:cb:b8:95:44:db:06:0b:57:cd:85:60:8a:93:
04:ee:26:2d:c1:80:39:b4:07:22:ce:ab:78:d4:64:
ff:3f:fd:1d:61:a1:44:97:b3:0c:05:89:67:fa:f7:
08:e9:e9:17:40:ab:15:27:94:72:6d:eb:9b:63:ae:
ee:fa:2e:39:4c:0a:6d:7a:4d:98:93:1c:de:6c:3a:
58:9d:87:b2:ab:1f:10:b2:e5:b2:92:e0:06:34:9a:
f0:06:d1:28:f3:ff:05:42:21:e5:c3:72:3d:df:b4:
8d:ba:c1:3f:6d:95:7d:a4:2f:f3:ec:bc:14:a0:9c:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:C6:23:E6:E9:56:80:C7:5C:CB:C5:A7:58:B1:79:13:3D:E4:97
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d7:5b:f5:4a:8a:27:62:32:17:df:26:8a:ff:4f:13:f3:e1:
6c:a7:a6:c8:a0:98:ec:12:4f:de:e4:51:00:5d:ca:37:12:88:
ae:f8:02:be:07:e9:40:b1:cd:ec:a4:de:a3:2c:1b:3d:16:a4:
64:18:6e:10:7a:ba:98:42:03:d0:33:c4:d4:18:24:81:d5:23:
4f:3d:ab:b8:d5:c2:4c:f0:f9:e2:86:80:c5:34:0c:be:81:2e:
59:82:b9:ae:97:2c:4e:25:09:f4:cf:ee:77:26:ba:df:12:7c:
96:71:06:83:e9:f5:28:d6:0b:a5:c7:22:bd:82:4e:73:65:bd:
58:8c:39:4a:ba:0e:6d:5e:34:23:54:4c:e1:c9:f4:77:3d:07:
55:c6:3b:ad:65:03:53:fe:71:34:32:41:8e:78:b9:ce:ef:61:
fc:75:89:44:89:79:44:aa:5d:a4:6a:5c:20:71:d1:2c:73:3b:
5a:ef:e2:33:d1:58:b9:ea:4b:0d:26:1c:ee:c6:25:e4:ac:05:
ff:a0:03:60:54:5f:ae:07:e4:d1:5f:6f:94:ea:89:0e:be:ff:
b4:22:3e:17:b0:8e:a3:24:f7:44:bb:67:c6:c6:cd:0d:93:98:
3e:07:5b:31:63:e3:54:50:0c:0d:a1:ef:53:0c:8c:70:e9:84:
12:a1:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:55:33 2025 by rpki-client