Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: 52TGPHH/y7aApZxQjgeODqByru/2T7P3Z63ghs+Q+7U=
Subject key identifier: A4:EF:F8:20:2D:CF:F7:62:B3:65:88:0B:95:5F:99:18:E8:20:C2:B3
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019A2140479A6CA263863D05E8AE243B5353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 16:00:52 +0000
Manifest this update: Sun 26 Oct 2025 16:00:52 +0000
Manifest next update: Mon 27 Oct 2025 16:00:52 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: ULTqARxYa3JaxayCdhfpMDC2UT8mSZEP4wJnF0spE4s=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:47:9a:6c:a2:63:86:3d:05:e8:ae:24:3b:53:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Oct 26 16:00:52 2025 GMT
Not After : Oct 27 16:00:52 2025 GMT
Subject: CN=a4eff8202dcff762b365880b955f9918e820c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:68:29:05:58:d3:7b:ca:fc:54:00:f2:18:
86:b5:79:8f:a4:2a:ec:34:f4:30:8f:60:6a:38:38:
4c:6b:d7:e8:40:c9:15:a2:ab:b3:3f:7c:16:c8:0a:
ba:fc:80:2c:65:67:6b:d5:5e:72:ab:75:ea:64:4d:
a5:e1:bf:95:cb:6d:d8:8e:47:c7:93:e7:6e:99:4b:
6e:63:1d:fb:04:b6:16:7f:b7:e7:15:38:48:ca:ad:
c8:cb:69:b9:a6:c1:68:80:1e:5b:ac:e7:dd:59:4e:
ed:93:b3:d8:ef:2c:2b:93:8d:54:fa:99:88:ca:16:
28:f9:8f:48:f2:00:51:76:f3:d8:56:23:7b:89:28:
56:3a:87:5b:9b:c9:8c:5f:7c:c0:f0:58:cb:1c:94:
60:c8:62:f2:6c:0e:fa:ff:b8:4f:7e:9b:48:08:c8:
75:92:fe:fc:af:f9:79:6e:73:3a:41:b0:11:84:75:
3a:55:a5:53:47:90:a9:99:2e:f4:c1:75:ab:d2:d7:
8f:90:75:51:93:0c:c8:ae:22:65:26:a4:7c:e8:af:
0d:9a:e7:1c:9f:5f:cf:cd:dc:3a:13:eb:49:f8:1d:
3e:43:44:c1:c8:9a:2a:8c:20:15:18:ec:c2:ab:58:
66:09:bd:07:00:34:4f:b8:bd:d5:b2:dc:49:d0:d1:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:F8:20:2D:CF:F7:62:B3:65:88:0B:95:5F:99:18:E8:20:C2:B3
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:93:04:1c:f0:89:d5:4a:d9:7e:90:3f:96:89:61:62:41:
23:c5:ac:fd:7a:66:1a:d6:62:35:ae:f1:1b:f9:16:95:3e:a4:
8c:85:b4:24:d8:ca:45:f3:f6:58:4c:14:89:1e:61:da:59:4f:
66:0f:36:7a:81:97:81:cc:2f:26:8d:c5:da:47:a1:d7:48:59:
0f:a0:24:33:04:4c:50:ac:48:30:3e:86:94:9e:f9:52:8e:55:
8a:1e:9a:73:88:f2:b4:1c:23:1f:59:2e:f4:24:24:ad:59:ef:
f5:a8:f3:bd:df:2c:e3:9b:a0:8c:14:65:b1:3d:a1:ea:e8:ca:
78:a0:4f:46:73:03:37:41:0d:0c:a6:be:6d:ac:7d:42:99:1a:
4c:6b:82:ba:42:20:e3:c6:44:b9:08:d5:e3:26:18:72:d8:4e:
ab:4d:7b:89:9b:75:cc:3a:0b:4e:90:b5:a8:3f:6b:34:03:d5:
65:8b:13:51:29:df:fe:f5:95:32:f4:c5:a2:47:05:49:0b:f3:
ca:89:69:a7:4c:58:0d:c4:fd:4c:99:8b:d9:af:8a:a4:55:5f:
c6:f5:16:ce:46:dd:20:d3:f8:da:97:e8:7b:a0:02:c4:e0:b0:
bb:da:27:3f:ae:02:fe:dc:2d:54:c0:57:70:9f:d2:19:d8:94:
28:52:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:53 2025 by rpki-client