Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: Oz6ESFcG13EMSmJfyPh/dXdJ/vwiyq9Vv7Iw4YMJNNk=
Subject key identifier: FE:FF:6A:59:A0:6F:4C:F0:3E:0D:8A:5A:BB:C1:32:7A:F8:61:D5:16
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019A70DC37EC455EF833EF60DDEEA591A9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0D43
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: HK1slT1/M3ALKLpeeJu8vzf7HUvYz0ZiwlKp+GOZr8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:37:ec:45:5e:f8:33:ef:60:dd:ee:a5:91:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=feff6a59a06f4cf03e0d8a5abbc1327af861d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:1e:e5:09:db:09:9e:12:6c:12:03:39:b0:
25:b8:b4:cd:5b:b0:e5:bc:4f:db:b7:06:0e:50:33:
52:d3:0c:ec:0f:a7:74:ce:62:c9:a2:10:04:d8:8c:
f7:c3:36:6f:c5:1b:71:49:84:a7:df:55:ea:1f:d8:
f5:95:92:e0:06:b9:b6:28:b6:7b:f6:05:96:0d:b3:
6c:8e:74:f1:56:82:54:78:7e:1c:af:1b:16:68:a4:
c8:f6:f1:42:bb:db:69:a7:95:65:60:71:2c:d8:a0:
da:b9:56:dc:fd:cf:df:b0:a8:0c:b5:1a:f1:af:c5:
1e:51:0d:e3:b5:04:cd:03:1b:bb:8e:bc:c8:66:bb:
f3:df:fc:b4:44:e8:96:bc:47:70:bd:af:f5:09:46:
01:41:11:41:ba:e0:6d:49:a4:db:a5:d4:2c:73:4a:
89:12:e5:15:03:5f:3a:69:57:0a:a4:1d:2e:d5:f1:
c0:f1:20:d1:55:40:06:44:c9:94:dc:16:4d:e8:17:
55:56:89:8c:e4:d7:89:0a:6e:87:5d:fb:fe:58:33:
c1:f9:2e:6d:e3:b7:1b:32:d5:d3:26:bb:a4:70:0f:
49:cb:a6:f9:05:7e:39:40:69:c1:2a:8a:62:da:70:
f8:4e:05:84:69:a8:d6:98:fc:84:bd:85:3d:31:b9:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:6A:59:A0:6F:4C:F0:3E:0D:8A:5A:BB:C1:32:7A:F8:61:D5:16
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:e0:65:15:e0:1b:c4:ee:c2:f9:75:30:7c:59:f6:35:43:
66:c4:03:1c:0e:e7:db:4f:85:63:ae:9a:37:ad:3d:90:be:fd:
c2:e4:98:fe:d2:ca:85:68:ae:07:89:82:06:18:16:c8:5a:63:
0f:68:67:28:69:9d:b9:a1:ea:90:67:a6:7a:9a:8c:01:f1:de:
b4:ee:5a:f6:55:ca:33:15:81:7c:94:f5:a6:83:65:16:91:56:
97:d7:fa:8d:6a:ee:6c:b6:45:54:5f:0a:84:ef:74:2e:31:32:
91:5d:23:96:1f:05:9b:71:b6:13:3a:26:0d:ab:70:5e:8b:07:
c5:7e:48:5c:1b:23:e0:63:20:57:21:a5:b0:e6:db:e6:8e:bb:
c9:7c:dc:09:f0:6c:18:2a:68:31:39:84:98:0a:1c:8d:4e:83:
5c:ef:26:65:96:6d:23:da:9e:1b:3d:54:5e:2a:87:ae:b6:3e:
ae:d2:1f:63:83:38:39:b1:a9:e0:53:1c:75:ec:c9:b4:e9:0f:
58:ce:a8:16:29:b7:95:b2:84:47:1d:c0:49:3e:fc:f0:a0:13:
7c:f6:51:5e:ba:64:14:ac:5c:37:11:b3:db:ae:72:d2:41:db:
da:72:c3:ce:c9:56:db:f3:7a:07:35:ae:9f:6c:e6:d8:75:75:
eb:0c:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client