Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: jKWtPleqr5b/5ConH3q84Bi9YEjLWS3btD63AKFl+7E=
Subject key identifier: 45:8F:56:9E:8F:A4:6C:87:7D:52:FE:5B:4D:72:54:65:1B:45:82:E2
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 019A172A498B395172430610A88638344B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 17:00:38 +0000
Manifest this update: Fri 24 Oct 2025 17:00:38 +0000
Manifest next update: Sat 25 Oct 2025 17:00:38 +0000
Files and hashes: 1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: n2QBLhgkOzYRuUgI9r18/jPRrlNRtkJJaFtZYesb9fQ=)
5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:2a:49:8b:39:51:72:43:06:10:a8:86:38:34:4b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Oct 24 17:00:38 2025 GMT
Not After : Oct 25 17:00:38 2025 GMT
Subject: CN=458f569e8fa46c877d52fe5b4d7254651b4582e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:03:a6:2d:1b:3a:1c:98:5d:a0:6a:9e:76:
c0:d8:fe:3e:55:a5:b4:bd:92:4b:85:c3:5c:01:6d:
d6:46:25:25:ea:10:5c:54:56:e1:a5:87:9b:55:66:
8f:c7:fb:4d:fd:74:1d:97:75:7a:a4:8c:2e:95:f1:
f1:66:91:7d:b7:48:59:34:b2:dd:a8:fa:a7:9e:bd:
eb:50:5c:2c:13:f8:a4:78:f6:70:0b:ec:7c:bc:27:
43:96:35:db:32:4f:1f:b3:7a:07:0c:51:f8:92:5e:
16:ff:7a:9a:32:a4:d8:16:a6:8e:36:45:f7:6e:57:
1e:d3:75:c5:54:ff:50:a1:36:65:d0:3b:2d:88:e7:
07:d8:44:87:51:c4:0b:4c:be:e1:b9:ec:cc:97:5b:
69:da:06:a0:c4:4f:2a:9d:71:53:f6:a1:92:95:0d:
be:ad:7b:12:2e:0e:aa:04:40:c6:99:7e:18:1e:50:
2d:cc:e5:8e:b0:b1:bb:e6:75:1e:95:ac:be:58:ca:
25:30:57:e9:1d:eb:21:f8:c7:2e:8b:bd:8b:96:6a:
fc:c9:f7:ef:40:0f:51:fd:92:65:3e:94:a1:7a:ba:
d4:6c:c9:f8:7c:cb:07:8a:be:7e:3a:51:ef:22:e8:
e9:ed:17:9a:14:2e:e2:f6:69:95:a1:3c:5b:f2:aa:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8F:56:9E:8F:A4:6C:87:7D:52:FE:5B:4D:72:54:65:1B:45:82:E2
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:89:86:d1:8e:10:00:1f:82:ee:81:5a:a7:7b:42:1f:ad:
e8:71:3a:9c:d0:b8:38:00:8c:d4:d5:41:fd:c1:9e:85:e5:88:
93:db:85:dd:48:65:56:9b:09:f8:a9:06:a5:17:11:3e:41:3e:
51:60:cb:44:e6:69:31:b3:b8:17:38:81:56:5a:89:7f:18:ea:
ab:2d:cf:2e:42:7a:37:80:63:91:3b:a7:40:fa:e3:fe:f6:e3:
3a:45:32:d5:0b:09:f1:7d:6b:c1:19:6b:a1:4c:00:a5:3e:b8:
42:fc:f4:5a:a3:b8:8a:c6:40:22:90:0f:a4:0b:5b:de:3c:7d:
f6:ce:3d:f5:43:e9:dc:10:be:40:9e:8e:ae:8f:05:e8:39:f5:
a0:4d:88:35:d6:78:66:e0:1a:85:78:98:4b:b1:53:69:01:59:
ca:7f:60:3e:14:8b:78:0f:85:b9:d8:81:c4:ca:b4:ad:1e:00:
58:a4:ba:d9:ef:e8:53:55:7e:36:8d:04:b4:a9:35:d4:17:cd:
0f:76:00:be:8c:e0:3b:9d:d9:7b:9d:41:8e:bd:13:02:0f:bc:
a7:9b:1a:44:5c:cd:df:ff:35:f4:56:8f:a4:dc:85:86:74:70:
56:7c:88:bc:be:81:98:00:74:71:66:9d:7c:e7:49:b9:fa:75:
ba:18:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:30 2025 by rpki-client