Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: WFgGr5Bb+9RdFUUgoCm/Vn4FGPn+dZ3Rn1921KrcWsg=
Subject key identifier: CF:5C:38:A0:5A:10:7E:FD:75:FD:A2:F4:FC:0A:A0:38:AA:91:49:05
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 019A71B84A98D551B7C387A26F4FE5DD0278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 13F4
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: Wou1X31We2MsO3RVw2V3btVFl/C8UShYNKtmIxfv2B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4a:98:d5:51:b7:c3:87:a2:6f:4f:e5:dd:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=cf5c38a05a107efd75fda2f4fc0aa038aa914905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:81:92:55:b3:b5:89:ba:bd:c8:c3:21:dd:
ec:d1:df:54:95:8f:aa:bb:5d:7a:66:4c:d5:69:3e:
e5:0c:40:3a:ad:fd:76:15:e9:e9:83:39:0a:f8:52:
66:3e:0e:6a:bd:00:45:22:bd:74:c5:7f:4a:8e:23:
56:bd:db:ed:0e:61:13:42:1e:cd:de:65:f7:3b:88:
36:4d:49:ba:87:5e:75:44:3e:20:76:72:46:34:11:
7f:a0:2b:d5:b6:c6:ab:ba:45:6d:f0:19:e9:da:6f:
92:b2:55:30:2e:d6:a7:98:35:a1:7b:04:61:6d:0e:
09:14:9c:0e:3d:c6:cd:eb:7c:a4:1a:83:1e:1c:29:
ff:a9:9c:9c:69:c5:06:5e:50:9c:a1:4b:f7:c1:46:
fb:1a:57:e3:3b:8a:64:0e:d6:99:5a:9a:f5:72:d4:
8f:b7:6e:e3:54:04:a6:94:8a:73:73:8a:a1:a9:23:
51:23:e8:32:9a:ed:58:1e:4e:ea:a5:75:7b:12:88:
4b:12:88:a4:2f:5e:69:0f:c3:ff:14:d9:fb:5a:de:
b7:1a:32:46:8f:e7:7d:97:f6:1b:c2:f7:39:fa:ff:
d2:6c:de:90:ab:42:6e:04:c7:87:ce:37:7a:66:f9:
49:38:12:a9:5d:6c:64:9a:42:bc:bd:ce:3c:c3:7a:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5C:38:A0:5A:10:7E:FD:75:FD:A2:F4:FC:0A:A0:38:AA:91:49:05
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:76:69:da:a3:03:4c:34:30:59:ed:ea:76:98:90:95:ce:92:
b6:d8:8c:08:ca:b4:e9:9d:5c:66:c7:18:0f:f1:f3:f9:ba:59:
2d:45:38:fe:28:dd:f6:ae:d2:0b:94:60:3a:84:dc:06:2d:65:
c3:2a:68:67:db:d0:e4:05:27:66:3a:60:1d:d7:a8:d9:ad:e7:
c0:51:b4:e5:97:61:57:cd:99:e9:c1:20:0c:e1:a4:85:05:56:
0a:5d:2d:b1:2c:2b:06:6b:33:4b:e6:a6:f3:58:dd:10:b1:54:
40:81:d4:a3:ed:bd:96:4b:fc:ae:41:18:84:cf:38:4d:93:84:
e6:dc:b5:2c:51:64:4d:99:32:7a:04:3a:eb:8f:61:1f:4b:1d:
78:c4:31:15:7c:c4:e1:9b:ab:90:4b:20:16:66:23:81:9d:d5:
5a:dc:15:fd:2b:14:5d:89:0b:63:35:14:62:1b:15:d1:5a:fc:
99:47:fa:bb:92:84:55:18:35:ee:21:45:ed:fa:4e:82:0f:9f:
19:a7:23:78:7e:f4:67:00:5f:0a:0e:36:c8:17:23:95:5e:a0:
0f:95:d5:8f:6a:8e:a2:8b:f6:f3:04:70:a1:7d:48:3c:51:e1:
a7:ea:67:68:11:36:65:4e:08:61:f6:59:ed:4e:49:bf:2f:7e:
91:e1:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:11 2025 by rpki-client