Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: ZulfFf8NbLVpmAZk1JDJoM8eNOleHx5hDBY9/yN4GWw=
Subject key identifier: B8:82:E9:5C:14:D6:25:0E:61:23:62:21:39:EA:32:DB:BC:45:E3:2B
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 019A0B5CC1C62675782285B36BFFBB87F05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 10:00:19 +0000
Manifest this update: Wed 22 Oct 2025 10:00:19 +0000
Manifest next update: Thu 23 Oct 2025 10:00:19 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: 0G47fKTOvrDN1CZpztmWI0G0QcOiJBy8tDvv2tzOz30=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:c1:c6:26:75:78:22:85:b3:6b:ff:bb:87:f0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Oct 22 10:00:19 2025 GMT
Not After : Oct 23 10:00:19 2025 GMT
Subject: CN=b882e95c14d6250e6123622139ea32dbbc45e32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:df:52:82:3c:12:db:8e:18:a1:01:f0:3d:
a1:d0:90:93:48:f3:03:21:da:10:99:4f:8b:28:72:
c0:c2:10:34:f0:3f:4b:76:51:86:3d:47:c8:b2:f1:
f0:82:c3:83:11:d4:fb:da:60:c0:69:7b:7e:4c:3b:
e7:cd:ab:c9:f9:04:9c:d5:89:bb:79:7a:5a:aa:92:
8d:82:86:14:69:bc:b1:c5:29:07:f0:7b:1c:ba:69:
88:1d:67:3c:dc:25:19:09:0a:e7:4b:3c:79:22:45:
0f:45:6f:37:3e:6c:af:fb:14:42:24:8b:a2:8c:a6:
23:18:ec:19:38:f7:ef:98:37:8d:a0:8e:36:2f:d5:
29:e5:fe:c9:d8:e0:26:d6:2a:76:2a:ee:61:fd:b3:
0a:fc:36:71:00:1f:b4:a1:e2:a7:ee:32:0d:c0:8e:
43:0d:b6:69:b9:8b:4a:e8:ce:d5:56:b8:db:83:41:
65:fb:81:8d:d7:64:11:9e:9a:60:5b:60:ba:46:94:
62:9b:72:7c:a4:f7:73:71:e8:62:6b:34:1c:80:f9:
7a:5c:74:8c:3f:d3:02:72:f2:66:ba:03:79:92:04:
58:35:e5:1a:77:1d:18:97:06:10:e2:d9:dc:bf:ca:
d2:2d:d1:aa:81:64:69:63:60:4f:08:97:64:de:fc:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:82:E9:5C:14:D6:25:0E:61:23:62:21:39:EA:32:DB:BC:45:E3:2B
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:31:79:f1:47:9c:70:da:09:38:d9:9a:aa:68:d6:3e:f7:31:
d6:62:99:e6:4c:d1:ef:80:63:91:2f:66:c7:02:07:86:df:99:
1d:07:71:45:98:b9:24:80:1a:4a:bc:33:5b:75:37:c0:d1:01:
90:d7:04:bb:47:09:8f:86:09:ad:2e:7d:d7:22:f1:08:12:17:
9d:c5:e7:92:a3:58:f1:b0:07:bf:5f:84:78:ed:0a:bd:df:52:
54:42:b4:fd:c9:f6:1b:c0:3c:1e:79:1a:7a:c0:67:9e:b8:40:
8f:41:b6:34:80:01:48:ff:57:1c:2f:be:b7:43:00:c3:92:c8:
4c:4b:6f:33:22:3f:3d:f0:1d:e1:39:77:8a:ea:bb:3b:1a:aa:
13:7c:e0:b7:7e:8d:d0:2d:a6:4d:d3:38:a7:d7:8e:16:15:dd:
de:99:18:44:e6:cd:62:0c:49:e5:d0:7d:1c:5c:29:da:55:b1:
bb:00:4a:74:d2:83:ff:2d:17:5c:47:e0:96:a9:db:f7:90:54:
78:3c:02:10:9e:5f:31:43:4d:a5:b0:20:97:ca:52:39:5b:ee:
e5:af:1b:b6:48:6e:66:24:5e:d4:a5:48:58:15:73:3e:0a:b6:
dc:1e:1d:00:0e:6c:b5:cc:64:a7:1d:c2:cb:47:89:f6:cf:11:
91:40:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:06 2025 by rpki-client