Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: 1En9lS17xM5yluCuTJl9TumM0tgjATMZA7CPSa/lvKg=
Subject key identifier: 27:C8:FC:08:34:69:68:7B:10:CB:3F:8D:DD:33:FA:FE:51:FE:D9:D8
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 019A72939EB3D5F4AD854DEA449A59647E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 14F5
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: 8TX/Ypk06DrOTn+G/ag1AUu2uVYejmmmpmyI8PbFosc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9e:b3:d5:f4:ad:85:4d:ea:44:9a:59:64:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=27c8fc083469687b10cb3f8ddd33fafe51fed9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:ad:6b:c4:1b:89:cf:b0:e9:3a:37:2e:60:
a1:79:8e:71:84:39:7d:b8:d3:fd:3d:f6:f0:4b:a8:
d7:f4:15:4d:52:9d:33:7d:5a:d9:75:04:93:f9:7d:
d3:84:7c:1d:17:80:f8:6b:d1:43:95:52:80:f1:fb:
83:bd:80:61:d3:e5:46:3e:05:e2:cc:1e:55:d8:1a:
87:a6:b8:51:e9:85:4a:ef:48:c4:35:2e:76:00:f8:
4a:cf:d1:d3:c7:ea:5f:9b:29:68:65:78:ee:8e:58:
96:85:ec:6e:51:b2:94:50:0d:4b:5e:56:75:ba:e9:
50:fd:80:ea:a1:72:a5:15:39:17:f8:73:a9:d6:92:
22:67:c3:e7:e6:c9:93:3e:91:0b:90:1e:c3:09:65:
17:19:9d:67:83:0c:96:5d:cb:20:2d:b5:2a:cd:ac:
65:8e:6d:99:2b:e2:c3:b6:0a:9e:0b:ca:7a:b0:28:
1d:27:42:7c:8b:46:a8:58:29:15:31:e0:00:d1:9b:
fd:46:59:7d:0a:49:20:a9:d3:b7:97:eb:f2:01:12:
c3:41:a7:1e:ca:91:4c:fb:7d:b4:9f:6a:f4:16:88:
4d:d5:aa:5d:46:93:f9:63:d1:92:4b:98:cc:46:4a:
00:58:ac:b6:d5:70:f6:9a:02:98:bb:c5:d0:b3:81:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:FC:08:34:69:68:7B:10:CB:3F:8D:DD:33:FA:FE:51:FE:D9:D8
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:62:d1:4e:83:fd:34:e7:72:4f:02:56:f8:28:69:6a:2c:
21:7c:4a:33:c9:b9:93:54:d9:57:55:81:7e:72:55:a9:e8:ac:
41:d0:9b:5a:e0:39:ae:ff:ad:f3:75:a2:1c:2f:b2:11:0c:28:
c7:a7:7d:09:fa:53:a4:46:24:a6:c6:74:33:ff:8a:25:a8:71:
37:03:79:59:31:d3:bb:e7:98:6e:39:91:ec:48:b6:89:ce:ff:
ff:04:80:85:8e:f5:45:d0:49:b1:e7:e2:f4:2a:6e:7a:09:f4:
67:e3:92:47:f6:28:6f:a4:8f:a0:42:46:b1:6c:8d:8b:44:92:
6d:9f:54:39:4a:e3:19:07:5b:4d:bd:0e:f8:c6:78:33:c9:75:
c6:86:ae:61:0f:aa:c2:c8:fd:ce:4a:9b:af:28:2b:f2:e8:77:
80:07:87:bc:ff:8f:03:de:95:1b:8c:64:6c:7c:1d:9b:25:a5:
bb:ea:40:8c:11:a9:0f:d2:c5:ca:dc:f7:1f:d2:07:47:2a:88:
d5:9f:04:3e:51:f2:7f:0a:d5:7f:82:da:e5:41:d3:ea:89:4a:
8e:cc:8b:a3:56:6f:90:ea:c6:e8:9b:cb:28:55:53:cf:a0:5a:
de:b5:e0:3f:2e:69:85:a9:a8:63:03:59:bb:c2:30:87:13:84:
4e:8c:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:25 2025 by rpki-client