Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: EH9rJUAut7o9yvN8h7UFH83lZcqzNlCoHUdAir7DRVg=
Subject key identifier: 68:6F:1C:EA:9F:82:2B:BE:32:C3:D0:C0:A0:FF:C6:D1:78:19:35:67
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019A1F888CBC4BB4C3CE6E30142E18066691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 03D2
Signing time: Sun 26 Oct 2025 08:00:33 +0000
Manifest this update: Sun 26 Oct 2025 08:00:33 +0000
Manifest next update: Mon 27 Oct 2025 08:00:33 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: DV8XDvRrDne9T0NWM4MDGf7T1fqsGgM56irxZTRnLdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:8c:bc:4b:b4:c3:ce:6e:30:14:2e:18:06:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Oct 26 08:00:33 2025 GMT
Not After : Oct 27 08:00:33 2025 GMT
Subject: CN=686f1cea9f822bbe32c3d0c0a0ffc6d178193567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:ac:d3:c4:87:24:d0:39:1b:7f:ae:cd:71:
9e:80:e4:e5:d7:76:4e:f2:69:35:28:50:91:49:35:
df:11:c7:ca:82:1d:fb:59:1b:e2:55:a6:04:b2:0d:
c9:2c:ae:8c:b1:09:54:f7:c5:b6:f9:9c:5a:01:fc:
ee:e6:44:25:b1:6a:2c:59:dd:d1:32:73:fd:06:7d:
a4:d9:03:90:64:a3:f7:f5:70:43:af:a9:bc:d9:04:
7b:e0:90:9a:22:b8:47:9d:d8:14:90:54:10:cb:38:
13:c1:22:a5:17:1a:56:f9:51:f2:29:8d:c9:5e:02:
20:df:88:69:37:60:fe:da:a8:37:d5:aa:1a:87:74:
da:f6:97:bb:d7:77:2d:08:46:4f:ed:12:3f:1f:d7:
4d:64:10:d4:83:36:4e:b7:a4:8a:5c:c8:b7:e7:a0:
cb:37:41:7b:db:ac:ff:d6:d0:21:e1:7e:2e:a4:fd:
b6:a0:71:30:1c:a1:22:4d:b8:8d:e3:8f:68:c2:34:
33:54:08:a1:d4:5d:53:a9:00:cb:c8:8c:1d:92:ef:
78:d7:87:ca:d2:9a:e5:22:dc:96:28:2e:bf:c0:a4:
0a:f1:9c:25:d6:fd:73:ae:f1:5c:66:8c:9f:f2:5f:
ba:f7:73:88:27:e8:73:87:23:cf:c8:80:63:7c:e8:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:1C:EA:9F:82:2B:BE:32:C3:D0:C0:A0:FF:C6:D1:78:19:35:67
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:f5:71:88:33:89:f3:fa:ee:7b:fb:7f:16:3d:96:27:12:
e9:61:a4:fa:5d:f1:dc:91:83:9a:b6:c2:7c:a0:9b:ee:b0:c0:
82:e5:b5:11:e1:48:58:cf:1b:52:2e:70:83:59:ff:86:67:fc:
a0:cd:a0:b2:be:4a:66:af:e9:64:21:79:af:c1:e0:07:b9:85:
9c:7c:33:70:36:98:6f:44:b3:52:88:8c:29:6c:6b:29:33:e6:
e3:17:f4:3d:88:53:95:78:38:4a:f6:ec:a3:43:42:fb:38:ba:
04:37:81:d9:14:32:e0:a6:ac:97:8b:69:be:51:38:7b:f2:4d:
78:9f:93:ad:c1:bc:b9:9e:f1:6f:7c:6f:4d:4a:1a:3f:8e:4f:
94:1e:38:98:b3:9b:29:6d:47:f1:23:1f:fc:c0:dc:ce:72:ca:
dc:37:27:e6:f5:c2:05:c6:77:ca:4f:60:04:62:7c:20:e7:34:
b2:cd:86:4f:f7:33:c8:63:3e:93:b8:98:eb:26:a2:a3:20:10:
9f:2f:be:7c:2f:a1:b7:35:0d:7b:f4:0a:12:be:f4:bf:ce:21:
f3:b3:d3:a7:b2:96:33:21:c3:c8:38:fb:60:f9:41:67:db:bb:
ec:89:19:91:50:10:cf:ef:65:8f:a8:b6:57:3f:b5:c3:ee:a9:
36:37:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:56:17 2025 by rpki-client