Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: UM3D7gbMTMLxAT4iQSDPSl0Ux9PL5Sahsp4JT0Y3uzo=
Subject key identifier: 35:08:1E:94:5D:09:D4:8F:DC:41:6D:CE:E0:45:0A:24:C7:CF:07:DF
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019A7180872CB18E741245F2C93790AA753A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1772
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
3: ObkoamnLayObdruWUVgDbymFpX8.roa (hash: h3ksuf6RlogpUGG+WTsKW6QNPIIF290h4H13NE4plvY=)
4: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: 5WUT+cRDMvtQYV72JD4gFcvxPSJHifcFFSiqZW0EkKY=)
6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
7: liY8eILapTD5y2M0s8j0o5Q8kWY.roa (hash: S0HfWHfjX1Uqh+uYLK7ohENnIrYxlreuTzEjaVUpEss=)
8: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
9: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:87:2c:b1:8e:74:12:45:f2:c9:37:90:aa:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=35081e945d09d48fdc416dcee0450a24c7cf07df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:58:2d:2c:d8:3b:d8:03:14:30:37:0d:53:
48:05:04:22:e5:4e:c4:28:49:4d:b4:d6:c1:92:49:
7d:e0:71:98:06:56:00:8a:6a:eb:1b:0f:83:66:92:
67:aa:dd:5f:f7:ff:4a:9e:44:85:17:6f:9d:7e:68:
f2:07:2c:ac:39:31:4d:57:09:e1:38:7c:a6:8e:cf:
15:11:14:03:a1:ea:1f:23:ce:6b:fe:00:c5:ee:16:
eb:f4:74:e8:6e:b0:58:b4:65:65:51:7c:3c:cf:c5:
ff:4c:d4:e0:6b:ba:62:29:ee:38:85:fb:94:07:78:
a7:60:52:e0:36:1c:00:b3:8d:59:90:ee:7c:c5:c2:
a3:ab:3f:fa:90:50:27:90:73:a2:f2:e1:a8:64:91:
45:4c:ce:c4:58:4e:06:2f:06:7f:8b:f9:98:2f:42:
af:52:91:e6:67:c2:df:c2:5f:5d:48:0d:b8:d7:61:
cb:ce:28:2e:18:47:56:1e:a7:22:74:8a:21:6a:28:
e7:f4:3d:f5:78:9a:6f:39:2e:24:67:96:af:63:5b:
a8:60:b4:30:0e:4c:e8:06:dd:dc:83:ae:d9:15:bf:
a7:86:33:de:b6:c6:2f:f9:a2:4a:e8:86:e7:2b:0c:
81:15:75:dd:1d:b2:19:c3:89:74:8b:ee:da:68:90:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:1E:94:5D:09:D4:8F:DC:41:6D:CE:E0:45:0A:24:C7:CF:07:DF
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:09:b6:8c:65:c0:fb:14:29:8b:09:36:6f:25:df:08:c5:7c:
19:74:49:90:0e:80:60:97:cf:d0:5d:c1:fc:e2:34:de:d5:9e:
0b:55:ec:6d:ed:9a:7b:01:c3:27:ef:b4:af:23:3b:e6:8a:02:
13:f3:19:ec:57:29:29:3d:a2:eb:ca:55:11:51:98:2e:19:79:
c3:f7:42:f8:7e:ff:6c:22:d0:14:04:27:ea:fd:cd:a0:0c:3d:
8e:aa:56:ab:15:38:76:07:53:2e:6a:06:fc:5e:ad:c1:86:20:
d9:57:34:07:83:cf:0b:eb:91:86:b5:65:f7:38:fe:c2:b2:45:
4f:45:50:ec:2f:b3:3a:19:91:84:bd:56:f0:e2:4f:7b:1f:55:
0b:c3:ab:0d:71:87:3b:50:92:bb:e1:f7:f4:b2:81:bb:50:a0:
ad:fb:86:dc:81:0d:bf:9c:af:13:f1:e8:32:c5:ec:4f:17:46:
fd:14:06:1c:ff:fe:75:dd:98:f4:a8:a0:d7:1e:33:b7:d4:43:
40:77:e8:c6:94:ba:07:75:a4:82:f8:2b:f6:92:61:b1:be:23:
71:60:37:7c:56:32:97:42:7f:b0:39:e5:a0:84:fe:55:8a:de:
b1:18:b4:ff:e0:db:22:f5:22:27:5a:04:72:9e:ee:66:d2:12:
8a:64:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:46 2025 by rpki-client