Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: ZJ7jz+3mt96d3g+XJjD3CrZQL5wis5v+rDo9/rVtufI=
Subject key identifier: 92:DE:0C:F4:EC:EF:4D:24:96:1E:66:FB:FE:CE:E9:A5:08:95:CA:2B
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 019A711370A92C9AD562B5385AC08A4D941F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: 7ae4y0uOtCSfJv3cO884c2iwmRcCYMZUE6Z3h0djDss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:70:a9:2c:9a:d5:62:b5:38:5a:c0:8a:4d:94:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=92de0cf4ecef4d24961e66fbfecee9a50895ca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:54:93:74:51:56:20:8f:e6:e5:d8:9c:d4:
7b:80:ba:37:d8:d9:a6:90:eb:71:1f:1a:1d:f9:3a:
0e:16:46:5f:74:b6:9e:91:84:e4:79:15:45:1f:00:
35:08:ea:e1:2a:f7:44:ce:6b:de:22:0d:53:e8:46:
41:8a:fe:e5:19:f3:98:f4:f4:6c:f7:30:18:c7:8e:
c8:86:56:bd:5c:19:9e:12:14:09:10:2f:3a:d1:66:
2e:a2:8e:57:e3:ee:01:b5:aa:6f:80:f3:6e:8f:a8:
a9:02:4a:a9:c7:1f:60:29:37:88:b5:a9:43:e3:9c:
25:6a:36:21:36:ea:77:33:93:79:cd:13:9b:a8:c0:
41:26:c0:a2:35:04:0c:2b:91:b0:a7:84:74:62:f9:
57:9e:dc:b9:90:78:e0:e4:fa:84:94:24:2f:af:bd:
37:42:70:3a:7f:6e:50:3a:d3:bf:56:71:33:56:c9:
d5:d7:b1:5e:50:43:71:d1:b1:47:81:f6:80:84:98:
ee:ea:63:19:8a:0d:d3:af:02:52:03:ba:2c:71:43:
4b:01:fa:d3:04:6c:98:26:72:24:59:0d:16:4f:8e:
ed:36:67:2d:55:5b:28:5d:e7:25:0f:0b:20:61:97:
dd:0d:a4:15:68:8b:16:e6:b9:7a:d6:e4:6e:f2:80:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:0C:F4:EC:EF:4D:24:96:1E:66:FB:FE:CE:E9:A5:08:95:CA:2B
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5d:33:70:94:11:df:b1:71:0f:3a:6a:46:a0:a7:8d:db:62:
5d:20:75:92:d5:d2:3b:81:d4:b0:2e:c5:b6:96:f3:60:ff:b1:
b8:72:f4:28:49:fb:47:e6:ca:9b:8a:f1:21:7a:65:1b:35:38:
ff:9a:2c:0c:fe:eb:7f:64:f3:e2:79:72:00:dd:bf:09:f6:87:
4d:25:06:34:cc:8f:2f:c7:46:de:d0:c4:44:81:22:29:61:f9:
f1:94:bc:1d:2e:b9:54:22:5f:39:7f:6b:98:06:a0:51:63:27:
8b:74:88:c7:27:5f:5b:08:c9:ea:3c:37:02:37:25:f7:5f:b2:
74:f4:ba:30:db:a8:23:9c:d9:72:fd:e6:1c:d7:79:f3:b0:06:
3d:3a:9c:bf:2c:14:da:33:29:cb:f2:60:1f:e9:5a:96:52:c9:
e1:79:8c:b7:5f:6c:03:7d:a8:81:38:31:18:4b:ab:9b:54:51:
43:9c:18:25:b2:32:3c:21:da:fb:07:22:2e:a7:ee:27:0a:75:
1d:ef:7c:7f:d0:f3:20:9b:a5:ce:39:74:41:9c:1f:90:8c:31:
59:73:85:f3:84:25:02:22:3a:81:62:95:e8:2b:f2:0d:35:b1:
e2:d7:0d:42:84:92:cb:a6:57:03:43:9c:f5:1e:65:cc:ce:a7:
a1:62:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:58 2025 by rpki-client