Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: gnkXjuTSzEQYPM4Pnw38PTwbxcOXQzd8J5wGU9o0x5Y=
Subject key identifier: 23:A1:79:D2:26:A8:D0:B3:FC:FC:DF:E4:41:9D:DC:3E:C2:DF:6E:82
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 019A7293F3B9D99BB806118EAD85C0A7E42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0FFA
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: k9Mnqy/7C9jVyppVcgY5fh1Luoo8myh2PYBJe9TVFw0=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f3:b9:d9:9b:b8:06:11:8e:ad:85:c0:a7:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=23a179d226a8d0b3fcfcdfe4419ddc3ec2df6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:ac:32:dd:4c:ce:28:4d:29:79:bc:cb:64:
56:b4:67:cf:fb:a7:8d:a6:d1:9a:6d:90:ea:7c:4b:
49:40:0f:a5:68:2d:aa:b8:09:f8:80:f4:88:dd:b9:
c2:40:a6:45:f4:07:e4:42:99:59:3d:f3:59:99:b5:
40:32:37:40:5b:8f:95:fe:d4:fd:0d:f2:63:d3:4c:
25:97:ae:eb:7d:6a:59:fb:e8:0c:df:84:b8:f4:bc:
72:aa:ec:b2:e9:17:dd:7a:7d:3b:4a:a7:85:19:47:
17:ba:f0:7e:67:7d:46:89:be:c5:df:b5:01:76:af:
ce:86:01:02:3a:5b:59:58:a6:fa:1d:cb:cd:be:13:
70:43:af:41:cf:91:60:ee:98:39:2f:a6:a5:04:2a:
17:68:db:ab:7a:12:fa:17:19:b6:de:b9:ad:40:b2:
36:05:45:c1:0c:89:0b:38:61:93:fd:4e:a3:87:40:
52:08:0e:e3:cb:3c:b6:9e:c3:9e:a0:15:82:5e:0e:
9e:c3:4f:04:10:ff:2a:02:e7:b4:46:8a:30:8a:19:
01:15:16:3f:1e:a3:b7:6a:5b:65:49:71:39:13:9e:
b3:87:54:dc:79:45:8f:4c:ab:9e:a9:26:b6:a0:f0:
0a:87:c2:0e:0c:2b:4c:82:da:c5:1c:2a:af:0c:a8:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:79:D2:26:A8:D0:B3:FC:FC:DF:E4:41:9D:DC:3E:C2:DF:6E:82
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:56:e3:56:66:d9:d9:a6:e5:d7:37:2c:5f:c2:28:78:26:
2f:5f:e3:c2:40:c2:5f:64:be:37:33:af:51:e5:d3:22:2e:4f:
f7:ac:87:73:d7:0a:7e:98:dd:ea:2c:fc:d1:06:b9:a6:8c:84:
f7:3a:4b:a2:2c:31:a7:f6:31:34:ce:14:11:82:ce:57:59:c1:
7a:96:73:7f:f4:89:8b:d0:68:2e:60:31:bd:53:1b:2d:45:cb:
1e:6e:49:68:a1:99:3a:00:6e:c8:91:de:55:58:65:d9:7b:0a:
56:db:ed:d2:24:11:9f:4c:13:57:70:5e:b6:28:78:64:36:d2:
ca:4f:4d:b9:1f:25:52:17:8f:25:5e:9a:60:86:b9:c1:29:f7:
9d:73:bd:b6:53:ac:12:60:d8:0d:09:8d:6c:28:d8:6c:d0:57:
2d:15:b6:d3:d5:66:e5:95:37:7d:14:40:a3:12:31:38:bc:0c:
d2:f9:59:9e:4f:cc:67:ea:e8:cf:6d:93:ca:cc:9a:25:ad:7b:
e1:9d:2f:63:0d:3d:37:ca:c4:6b:1e:93:ff:ad:f1:92:de:69:
e2:76:d3:dc:fa:eb:1e:bd:3d:90:bc:1c:66:0e:03:81:25:0e:
21:53:31:a5:ff:5b:e0:bb:68:4f:98:d5:4c:46:3b:70:5d:7e:
dd:07:e7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:33 2025 by rpki-client