Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: tUMeqB/7tNyuKW7s7s8BFmkhn7yOwMHm+PFGQV7irYg=
Subject key identifier: A6:06:38:9F:4B:40:A2:77:14:D4:5D:55:65:91:08:6C:45:CD:FA:59
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 0199FD6B19FCBEB11759B7A8DC80B8D99C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 0651
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: 0AkcGO/URkNchussr0GvMUGi12S+H6iTjNJl6fRsF+k=)
2: jXBUCLrGPcb5J_lVILF4CB21e-I.roa (hash: dGKplm/JNC81Y01bHZhHHlwu7oIXFhOtp/y83oreUvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:19:fc:be:b1:17:59:b7:a8:dc:80:b8:d9:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=a606389f4b40a27714d45d556591086c45cdfa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:c0:b8:88:5d:fb:c5:2c:0e:7a:c2:eb:2f:
5e:f6:a4:6b:e3:d0:8b:8a:2a:38:06:eb:bc:d6:b4:
ed:67:ce:94:e2:25:84:72:32:97:24:ec:12:04:ce:
ca:37:63:8e:82:3d:5f:fc:3a:5e:b0:78:80:c4:2f:
81:d4:be:53:b6:e7:10:f8:a0:20:9b:9b:75:56:c9:
16:15:af:1b:1b:5e:d2:c3:91:59:e3:b2:65:fc:c9:
6f:73:46:b3:82:27:62:74:ae:be:b3:16:1d:27:ec:
b9:21:32:06:e5:81:1f:09:0d:2e:f5:55:83:e8:70:
9e:a5:04:26:89:35:25:a7:cf:40:59:09:41:ee:fe:
dc:41:f6:f2:78:5c:c4:dd:04:1f:72:b2:18:03:32:
2b:66:7a:47:e2:05:fb:62:3d:0a:f0:93:2b:05:ad:
69:60:c4:a6:bf:d5:59:66:a5:a5:bd:74:2e:f2:bc:
62:fe:fd:fe:4d:b2:02:78:3d:16:66:23:63:08:0b:
97:24:1c:a9:97:6c:6a:28:d7:6f:2e:c4:51:35:0b:
91:20:44:81:80:e6:6b:eb:29:54:26:06:70:22:22:
48:bf:fa:11:36:79:f8:74:4c:30:93:3c:f2:f1:42:
53:ce:81:c4:5a:67:d2:80:90:72:3a:4d:33:3b:d4:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:06:38:9F:4B:40:A2:77:14:D4:5D:55:65:91:08:6C:45:CD:FA:59
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dc:50:00:21:63:72:e5:e4:10:e1:c3:64:3f:a7:1e:8f:ba:
6c:ad:05:66:3d:10:33:68:16:4f:de:ea:3d:86:ac:fd:7e:14:
08:86:e5:eb:53:f0:4f:8a:57:19:4d:da:02:e9:a8:a6:7b:20:
17:4c:bd:69:2b:e6:ee:5b:bd:40:7c:fe:59:ed:eb:6d:9b:77:
dd:93:2b:50:ac:32:77:b8:df:47:1c:81:cc:7d:c1:2e:92:c8:
ff:cd:54:78:a8:22:20:36:da:ce:93:48:0c:b7:b1:88:ef:41:
5a:de:93:2e:35:20:94:40:52:cd:5a:e1:be:d3:ee:96:85:af:
1a:5e:9c:0f:fb:6a:59:06:58:8f:74:e4:b6:ab:a5:06:95:a0:
37:56:f9:ba:36:88:13:80:3d:7f:bb:87:d0:bd:a7:b8:0f:ff:
bc:5e:6c:69:75:90:9c:2d:b9:c6:ae:69:8d:73:63:7b:c3:09:
8d:79:6d:13:75:2a:94:68:0a:18:cd:ac:69:e4:53:de:a5:26:
0a:23:a4:28:97:d1:ac:a7:e4:b1:57:75:39:b0:d5:ee:b8:d8:
d5:12:2e:ab:1b:58:b5:6c:1e:59:f5:0e:b2:51:70:6c:27:1c:
75:c9:e4:7c:1a:51:51:45:2e:d9:30:c5:9d:9e:fb:7f:ac:40:
fe:f0:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:22 2025 by rpki-client