Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: Z1bUU4mHNKwwQUOfwr1q6JF2hXHj9RQe1KN6kiHcQjs=
Subject key identifier: FC:2E:5F:7E:5E:DC:DE:72:2B:4A:01:62:F4:E8:A3:4A:93:8B:3C:78
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019A247941FAA4FA810186782C9FE4BA72CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 15D2
Signing time: Mon 27 Oct 2025 07:01:57 +0000
Manifest this update: Mon 27 Oct 2025 07:01:57 +0000
Manifest next update: Tue 28 Oct 2025 07:01:57 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: 96cEoszvYgks/DEnYBkAbi40PiwDhExXqiIAgyM/vxg=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:41:fa:a4:fa:81:01:86:78:2c:9f:e4:ba:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Oct 27 07:01:57 2025 GMT
Not After : Oct 28 07:01:57 2025 GMT
Subject: CN=fc2e5f7e5edcde722b4a0162f4e8a34a938b3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:75:1f:bd:c2:a9:7c:95:4d:e6:f2:b7:3f:
3d:01:74:b0:41:95:aa:93:3f:d4:50:87:80:fc:3b:
c4:db:3a:6d:e7:3f:1d:85:73:7e:05:bc:57:db:0b:
69:4a:cd:f8:7a:86:3e:00:cf:2a:d9:18:30:11:43:
7f:fc:3d:a5:92:74:1c:c6:93:e7:4e:e6:b9:9b:99:
36:9b:6e:94:9f:b1:44:61:78:75:50:92:a0:a2:46:
6d:36:e2:67:b1:9c:b3:38:d4:b1:c3:4e:28:69:5b:
f1:77:bd:2b:cd:17:b7:dc:76:ab:b3:ab:61:61:a5:
f0:1c:cc:d1:11:71:aa:9f:06:2e:a0:62:a9:2b:42:
25:bc:3d:ff:f1:2d:bb:19:7a:fe:6d:3c:e8:14:f3:
6b:c4:df:c6:3c:49:1e:20:59:80:cf:8d:bf:19:f7:
7a:f9:d2:7d:1f:27:e0:2b:06:e8:78:da:d8:a6:18:
21:dc:4a:d9:b9:88:31:bd:f7:12:d2:d3:b6:c6:19:
21:87:38:5c:ce:ce:c2:30:d7:d4:b5:47:48:76:78:
04:ef:d5:e0:9e:87:56:6f:2e:ad:62:38:7c:14:d7:
5d:27:49:8e:49:90:9e:29:a6:2a:d4:7e:f0:81:43:
5c:46:c1:2d:f3:18:3c:ea:dd:8f:83:20:5a:d7:cb:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2E:5F:7E:5E:DC:DE:72:2B:4A:01:62:F4:E8:A3:4A:93:8B:3C:78
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:3d:e5:d8:27:96:28:69:f4:6e:06:97:c8:83:00:de:ec:
2b:05:58:fd:5a:71:ee:a3:be:10:0d:57:95:05:d4:ea:5e:66:
2f:6e:2e:a7:1c:dc:a7:bc:5b:1e:22:0b:7e:5d:bd:1a:72:a8:
c0:a1:af:7b:f9:e7:21:54:48:a7:28:b9:f5:da:cd:93:6e:be:
2e:54:9d:25:74:6b:5b:80:61:f2:e2:6a:b4:ec:66:0e:41:43:
52:2b:8b:34:c0:8c:b9:67:e7:e9:a8:7f:37:ce:e6:48:95:bc:
9e:df:0f:a4:36:6a:74:a3:1a:c2:71:7c:34:4d:f2:f9:11:65:
29:0a:17:7c:a5:0f:a3:91:af:98:59:5b:95:7d:72:f3:33:a8:
6b:89:24:32:91:70:d8:3b:e3:77:db:0c:4a:b7:38:c1:fd:69:
7f:06:86:52:23:72:a6:58:7a:de:d0:f5:9e:08:06:cc:d7:5a:
15:68:08:d7:7f:16:12:b6:dc:7c:38:31:45:ee:03:c9:db:5e:
88:71:95:d0:87:f5:85:be:07:2f:37:17:6d:0a:18:da:83:51:
1f:cf:ea:bd:fc:2d:b1:cb:79:3b:dd:ba:60:f9:85:3d:3b:68:
f0:2b:3e:e0:c5:32:c2:61:39:d5:01:06:cb:24:b0:98:2b:ca:
49:45:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:32:49 2025 by rpki-client