Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: eKqGugpN9nCxN4KP6TS/RIrcZVnoztOaOA12Kh5JtWk=
Subject key identifier: BF:CC:9B:B5:AB:25:CF:A7:13:5D:7C:09:7B:75:39:02:DB:77:C6:61
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019A1A61F13CDAFF4866F59269BFB0CCB3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 0780
Signing time: Sat 25 Oct 2025 08:00:17 +0000
Manifest this update: Sat 25 Oct 2025 08:00:17 +0000
Manifest next update: Sun 26 Oct 2025 08:00:17 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: XoC25ahMIJLWxPeO+uOHtDpArWBDHrkUKAqEy/ctNr4=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:f1:3c:da:ff:48:66:f5:92:69:bf:b0:cc:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Oct 25 08:00:17 2025 GMT
Not After : Oct 26 08:00:17 2025 GMT
Subject: CN=bfcc9bb5ab25cfa7135d7c097b753902db77c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8f:d2:91:ca:30:72:93:a4:49:9e:f0:a3:75:
9c:fb:8c:b6:e6:de:c4:39:0e:d7:f7:9c:d5:1d:85:
42:6f:59:e4:21:8f:d3:5f:c9:79:cc:5c:bd:c8:18:
e5:f6:23:0b:34:34:0e:bc:54:24:97:03:fd:e6:c4:
a9:08:08:a0:b7:4e:52:05:98:b7:7d:bf:57:d0:0d:
52:bc:1d:fa:63:fb:f7:ef:aa:04:b4:36:12:df:f1:
da:6c:d1:e9:11:50:91:45:6c:d0:62:a9:21:c0:34:
73:62:ed:a2:1c:0b:99:bb:f3:f1:dc:80:97:cc:54:
bc:68:24:5f:af:6d:6f:f5:a1:b4:0d:84:90:69:10:
62:19:c9:10:c9:18:2c:cf:3c:53:5f:78:cf:dd:9a:
4f:43:5b:59:27:fb:fa:eb:3a:2b:58:91:04:79:d3:
5f:24:5a:bd:1f:42:40:aa:b7:17:13:dc:f3:be:77:
94:1f:18:4e:de:b6:2e:4c:d0:a1:9e:62:48:5b:9d:
79:a8:93:42:4e:9a:59:89:d5:63:92:90:df:8e:48:
33:3d:2e:e4:f4:37:86:7a:ff:eb:06:94:bc:2b:0d:
49:e9:99:3f:1f:37:22:65:7a:f1:e4:1e:16:5a:91:
71:7a:eb:3f:a5:47:16:64:95:d9:ee:82:36:7f:b0:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CC:9B:B5:AB:25:CF:A7:13:5D:7C:09:7B:75:39:02:DB:77:C6:61
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:ca:ed:6a:a0:4d:82:97:e5:4f:6e:64:e7:86:a1:4d:9e:
56:48:be:9d:25:ec:10:4f:04:f6:39:a6:31:4d:85:76:18:1b:
0b:cf:e3:93:85:af:75:ac:f8:bc:3b:09:2e:f0:3f:7b:e5:34:
08:78:be:a3:f0:04:6b:ed:68:3f:d7:e9:b7:fc:c4:40:21:a1:
d0:01:d5:e2:3e:17:1b:92:c7:64:95:6d:7c:99:86:05:cd:0d:
11:a3:09:07:b6:7a:8e:4f:b6:27:93:fe:04:b4:5c:2e:48:97:
fd:b6:ff:ed:50:ee:30:ac:e3:da:95:13:0b:c3:d6:87:72:45:
5b:92:e1:8f:0f:6e:78:50:8f:73:2d:c6:33:70:b5:64:0e:8d:
4c:7f:b8:f9:8d:80:b4:de:d5:c5:fd:f3:de:ff:24:73:f4:8a:
3e:ad:e1:bf:0d:91:20:39:01:c5:08:8d:83:5b:0b:54:d4:7d:
7a:3f:cd:44:f1:a8:84:d6:01:9c:6d:78:9e:1c:9c:fb:19:14:
59:20:d8:39:b7:07:18:b7:9d:09:3e:62:25:57:89:37:5d:5a:
78:1c:29:22:9e:2e:d2:fb:44:f0:72:f0:21:42:ed:a4:40:76:
6a:ec:d0:f5:33:68:58:c4:1d:21:77:01:f8:31:ba:46:19:47:
9b:15:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:44:09 2025 by rpki-client