Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier: qljtIfCyPiXeckDiGZ6YMlHosIF5Gk+z4h3mLBMrxDY=
Subject key identifier: 2F:32:5D:27:92:1E:FE:C8:75:56:55:50:5C:51:6A:1F:FE:A3:D6:B4
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 019A096E61F2527C7ED1D4AC96DA1EB83FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number: 0FC3
Signing time: Wed 22 Oct 2025 01:00:20 +0000
Manifest this update: Wed 22 Oct 2025 01:00:20 +0000
Manifest next update: Thu 23 Oct 2025 01:00:20 +0000
Files and hashes: 1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: qL/vRf7K5539ChRHAhuIfgk+Bwsd6UdNIr/BNz/OOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:61:f2:52:7c:7e:d1:d4:ac:96:da:1e:b8:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Oct 22 01:00:20 2025 GMT
Not After : Oct 23 01:00:20 2025 GMT
Subject: CN=2f325d27921efec8755655505c516a1ffea3d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:3a:35:75:2a:6c:42:e1:3d:d9:b9:5e:e9:
b7:a2:d1:f9:ec:38:66:9b:6b:4a:4f:b9:d8:6c:d1:
38:d6:60:6b:5a:91:08:01:59:5e:d7:3f:38:e8:0b:
82:0f:6d:8d:ef:1a:6d:2b:21:9a:a1:4d:59:04:0e:
89:12:ea:53:49:6c:bf:af:af:50:01:41:d2:f0:c1:
52:e7:a6:07:10:d2:d5:38:64:4d:28:52:3f:d6:5a:
b6:a7:ef:09:c3:d9:83:97:db:99:e5:db:99:9f:d0:
38:35:34:14:21:8c:1d:a0:1e:78:79:63:d5:02:6b:
d0:0c:f6:3f:80:e6:d2:c9:f7:9c:49:66:33:91:20:
95:79:ce:d7:e6:d6:cc:b8:47:94:0c:91:97:0d:60:
5a:9f:87:2a:fa:a7:c0:a1:a7:2d:ac:7d:c9:f4:f5:
c8:3d:ad:3d:68:ca:44:4f:19:f2:f2:12:3d:b6:cf:
7d:c9:2d:8a:85:96:91:15:f2:b2:1a:9a:45:59:1c:
6f:e0:ed:8a:ec:71:4a:c6:8e:f1:53:be:37:06:ff:
4e:71:47:e9:7a:a4:ef:01:0e:f2:82:6a:6a:93:ef:
38:f0:85:b6:0c:43:95:7b:40:fe:b1:f5:ce:5a:c7:
26:cf:d4:04:8a:4f:e2:49:37:9a:b0:b4:2a:3a:60:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:5D:27:92:1E:FE:C8:75:56:55:50:5C:51:6A:1F:FE:A3:D6:B4
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:65:43:01:df:2f:7e:60:9e:6a:81:ed:0a:5d:83:eb:d4:
8c:cd:79:00:96:66:31:4e:b1:a5:bc:8b:5a:56:9a:99:91:9b:
f2:c6:fb:2d:04:49:84:bf:25:3b:fd:1a:36:d3:85:2b:be:8e:
9f:71:b9:34:62:eb:57:5f:06:9c:af:8d:bf:21:d4:6d:9f:37:
dc:15:66:bf:55:ad:f4:19:00:dc:ee:5b:65:48:6f:99:d6:d0:
34:3f:73:77:95:1c:16:e6:d1:4b:e1:e0:9a:39:2e:6c:75:f8:
8c:84:9b:2d:29:8a:d6:d7:fa:d9:63:c1:91:f9:5d:ff:bc:e5:
ca:e1:a0:c1:41:0f:c0:9f:cc:c9:1c:ea:06:98:d1:9b:87:8b:
9d:6b:1d:78:8e:45:7c:3b:d6:63:13:82:3c:c8:01:ae:77:37:
2b:82:1a:1f:87:3d:5a:18:5f:fd:49:94:65:50:2e:63:5b:45:
43:f8:2e:39:e2:a2:4b:03:e5:da:20:4b:63:a5:84:e3:9d:cf:
02:d4:50:99:81:75:66:2b:db:9d:d5:46:38:7d:fc:5e:51:60:
bc:03:e0:fe:b2:ab:94:b2:e7:05:c9:7d:ca:b5:46:9f:02:ce:
b2:86:88:ed:18:c5:1f:63:1a:79:be:b2:11:57:af:10:7b:7f:
91:b2:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:46:52 2025 by rpki-client