Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: O4kVGXTuXc3HMdGnWnFKtyWXLkmkTQ3+XYgUvFCXJ/U=
Subject key identifier: 1E:8F:00:0A:44:41:43:AB:E0:E3:5A:55:E0:C3:BD:05:40:73:78:41
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019A1CBF29870CB374B160728E0915B81885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 19:01:21 +0000
Manifest this update: Sat 25 Oct 2025 19:01:21 +0000
Manifest next update: Sun 26 Oct 2025 19:01:21 +0000
Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: wKwqQUhiGl+8SmvhjqD6NDLj1fiRiAM85Us51KaEH+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:29:87:0c:b3:74:b1:60:72:8e:09:15:b8:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Oct 25 19:01:21 2025 GMT
Not After : Oct 26 19:01:21 2025 GMT
Subject: CN=1e8f000a444143abe0e35a55e0c3bd0540737841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:14:bb:b5:15:d7:ac:16:60:5f:40:e3:a5:
2a:c5:d5:06:07:9c:f4:2e:80:bd:75:70:5a:b2:82:
14:77:fc:47:dc:86:97:0a:87:f7:ae:90:24:54:d3:
c6:69:50:b1:1a:89:7f:41:ae:fd:ef:86:7b:7d:ef:
dc:5b:02:4c:b3:6f:18:90:3e:89:27:fd:f7:1f:6a:
6f:d5:8c:7c:66:ad:0f:7a:dd:92:7b:78:bb:25:03:
d2:02:6d:5b:71:50:05:f5:a8:95:ba:01:0d:50:70:
57:ad:a8:af:28:1f:7b:d0:59:6e:13:c8:8c:8a:30:
07:09:3f:a2:a7:31:16:fb:60:34:79:b5:5c:91:74:
cf:ed:58:99:0b:76:19:30:9f:2e:bc:76:4e:bb:3b:
ba:7c:32:ca:f0:1c:af:12:d0:5a:54:f0:8a:1d:27:
f3:7e:5d:52:b7:92:b8:74:0b:5f:78:3d:9b:0d:6a:
18:8d:51:a1:20:ab:0d:65:32:a1:ca:15:5e:ab:f0:
74:49:21:c1:d4:eb:c0:74:44:09:22:07:c2:c7:bf:
23:f2:cb:1a:d4:2d:6a:cb:3f:ee:13:85:8a:e4:a0:
5c:2e:df:1d:3b:d5:96:1d:67:1d:42:b2:ab:82:6e:
fd:cf:4a:ea:72:df:78:69:8e:c2:6f:d6:b8:97:db:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:00:0A:44:41:43:AB:E0:E3:5A:55:E0:C3:BD:05:40:73:78:41
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:6f:c8:77:50:62:33:02:d3:80:ca:9e:c9:7e:d9:05:3e:
ab:cc:0e:81:2c:df:a9:e1:c3:25:e0:4a:97:0f:24:d2:6f:03:
9a:b2:6a:2d:f5:37:a7:35:df:63:19:87:de:73:12:42:ed:ab:
ea:a2:76:c0:6b:46:0e:91:1b:31:bf:22:30:23:ae:d7:06:89:
6b:9f:06:0a:4e:57:e2:eb:d9:3e:b7:5e:49:da:16:40:18:1a:
d2:94:53:63:53:a3:2f:2f:8e:cd:7e:4b:97:7b:85:45:31:32:
4d:20:5e:e8:57:d7:cd:84:f9:14:df:a8:dc:06:7a:de:c7:61:
38:89:d5:71:06:94:37:84:de:a2:1e:01:d2:a8:49:d1:dc:94:
35:e0:ef:6a:04:67:22:d7:f1:37:07:c2:8f:1e:4e:02:ac:b3:
1d:2b:56:eb:43:df:73:31:8d:93:85:8d:22:39:3a:43:b8:16:
64:12:99:96:c5:c4:ad:38:2b:51:51:bb:76:b4:78:9d:4c:50:
3c:61:20:6e:b5:9a:2a:c7:08:92:e8:ad:4b:bc:50:31:d8:2f:
04:ff:63:b2:1f:de:23:ec:55:66:35:c5:69:4b:81:aa:89:0e:
c9:55:d4:93:20:0d:f4:7d:14:48:13:4e:10:45:47:03:02:a8:
40:ff:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:37:59 2025 by rpki-client