Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: OXkEadoHEHNaVU07CwLV8HnwCPv67cojSqE2ERSu6Z4=
Subject key identifier: 89:62:7E:65:B9:6D:82:73:03:0B:CB:11:30:1C:DA:CE:3C:55:20:10
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019A003537841533A57C97D396DDD1FFE62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 08BD
Signing time: Mon 20 Oct 2025 06:01:18 +0000
Manifest this update: Mon 20 Oct 2025 06:01:18 +0000
Manifest next update: Tue 21 Oct 2025 06:01:18 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: g+xpAQ3i0y/RQfEH+jV14BrHbrQnCYfwhTxDJaO6rq4=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:37:84:15:33:a5:7c:97:d3:96:dd:d1:ff:e6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Oct 20 06:01:18 2025 GMT
Not After : Oct 21 06:01:18 2025 GMT
Subject: CN=89627e65b96d8273030bcb11301cdace3c552010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:d0:43:04:d7:fc:61:f1:92:23:96:aa:fe:
1a:fa:74:99:2d:39:a3:8b:fe:c8:85:5f:c1:9b:43:
22:af:ad:1a:ea:dc:0d:3e:55:83:e8:73:99:a5:66:
33:7a:df:41:33:f6:a7:bf:99:07:6d:6e:9c:e2:52:
b1:3c:c3:c2:84:85:09:e9:c3:c9:0c:cb:49:d4:82:
76:6f:1e:11:60:b1:81:67:7d:7f:06:d4:35:10:fe:
b4:71:dc:b1:91:cc:df:d7:20:f5:5e:95:75:ec:10:
ba:d3:c7:7a:eb:ca:40:e8:2e:b4:19:08:7e:57:90:
12:d2:78:77:18:53:f4:39:0e:ad:e2:db:19:b7:60:
00:5c:0a:20:29:64:66:82:f0:fc:ff:53:b2:3d:40:
54:f4:f1:75:6b:75:e5:c0:25:da:56:17:ca:2d:d0:
c9:e0:28:f7:e8:27:a4:03:9c:7c:59:3e:d5:27:47:
53:58:d2:1d:d9:6a:ac:52:4b:7c:ab:57:a8:fc:9b:
65:7a:5d:1b:ad:4d:68:7a:ff:ef:41:26:46:50:2a:
f8:22:7a:54:39:d2:0f:9a:2f:fe:12:0e:05:9a:8f:
a2:c4:f0:c5:20:79:bb:6b:c9:4c:27:db:7a:c6:b3:
f3:ea:86:79:19:a1:6c:18:e2:03:70:0d:9e:22:d0:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:7E:65:B9:6D:82:73:03:0B:CB:11:30:1C:DA:CE:3C:55:20:10
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:19:30:8d:ef:2e:5a:1e:cb:b6:05:66:76:fd:03:a7:36:
96:c5:56:92:5d:09:b0:f9:75:e4:5d:3c:ab:3e:b9:20:c7:a0:
39:36:7c:a9:e5:aa:8a:b5:46:51:6b:c3:02:6c:d0:dd:6d:25:
b8:cb:7d:df:52:02:1a:08:b3:4c:ae:30:13:b3:6a:1b:f3:6b:
ff:48:c3:69:68:63:03:1d:03:c1:00:0f:12:ec:40:30:3e:c9:
71:be:2d:8d:d9:d5:1e:fe:fb:dd:84:39:f0:ca:c2:b1:dc:63:
f9:af:cf:79:90:ca:5e:30:b4:b3:63:e3:60:f2:35:63:f5:25:
b3:fe:94:e6:26:de:8f:d9:c3:c4:7e:af:51:49:9b:8f:c1:0d:
0b:ab:cf:cb:06:93:cf:8d:ee:13:91:77:8a:8d:74:db:d0:44:
08:de:ac:ef:6b:a5:0b:35:aa:ef:6b:5c:54:e7:bc:c6:a4:c6:
12:a7:77:77:2c:c6:5c:15:c7:65:a3:f3:95:7b:fb:40:2a:99:
3f:3f:4c:a2:ed:5d:65:e8:bb:1f:c0:60:6e:38:5d:25:dc:ab:
4e:9b:ff:ed:52:04:7b:56:72:8d:32:a3:3f:89:cc:74:56:6c:
a4:11:fd:b5:34:c8:26:8c:aa:bb:c0:67:1f:ee:00:40:50:37:
35:b3:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:54 2025 by rpki-client