Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: XAOCKTLVew//hhOy10Jnb9UjqlyvU+peWn75D7FCsis=
Subject key identifier: E2:AA:D7:84:DB:08:47:81:BC:67:DA:EC:D0:0E:8B:41:14:39:9D:C5
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019A01B5F804B36B2D18F2202BAF944562A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0B0B
Signing time: Mon 20 Oct 2025 13:01:33 +0000
Manifest this update: Mon 20 Oct 2025 13:01:33 +0000
Manifest next update: Tue 21 Oct 2025 13:01:33 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: siJYEtTpMGPIYR2hoBXoTn38+ZolYDFaT5x+sKS99PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f8:04:b3:6b:2d:18:f2:20:2b:af:94:45:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Oct 20 13:01:33 2025 GMT
Not After : Oct 21 13:01:33 2025 GMT
Subject: CN=e2aad784db084781bc67daecd00e8b4114399dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:18:b3:2b:c8:77:5a:f0:b5:0b:1e:d4:83:
04:b9:e4:b9:5d:af:ed:65:a1:c6:67:b7:90:cd:43:
9a:14:db:00:70:a6:9e:a3:37:92:00:05:d2:77:84:
7e:20:67:04:3e:ed:19:48:52:8f:b6:65:95:8d:42:
5c:29:85:5a:cf:97:fd:cb:7a:ad:5a:34:b2:09:a5:
7a:20:89:09:cf:e6:67:42:8e:57:08:e6:d7:10:40:
41:f5:8d:9c:ec:87:b3:a7:cc:2a:f0:13:15:3d:5a:
92:8e:94:89:77:22:45:0f:12:04:d7:9c:2a:1f:14:
87:38:a8:bb:75:9f:64:b3:8c:c1:66:d3:6a:be:44:
37:80:9d:36:d8:9b:72:27:b2:84:ec:b5:74:e9:8c:
e0:a4:c4:20:12:9d:4e:0d:30:34:d7:c3:87:d9:2f:
32:65:8f:7b:7c:43:73:25:88:7a:f0:2b:2e:c2:bd:
64:a2:69:98:43:d9:5b:b3:2e:5f:49:72:57:26:cc:
3c:6e:36:73:08:62:dc:0b:01:ce:02:49:8b:c6:3d:
fa:79:04:16:26:7a:d4:c5:a5:61:12:d3:eb:c6:33:
67:83:b1:b9:52:4e:8c:1d:bf:ca:68:03:86:41:13:
e0:61:be:fa:04:a6:cb:f2:eb:da:16:30:4a:66:4f:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:D7:84:DB:08:47:81:BC:67:DA:EC:D0:0E:8B:41:14:39:9D:C5
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:c2:07:ca:a9:c8:73:31:0b:7a:18:6c:f7:9d:44:4a:12:
a7:8b:fd:7e:94:95:1d:9c:5b:f8:ce:22:7e:51:fd:41:2c:f8:
9d:88:c9:90:1f:93:15:d7:45:4c:ce:cf:f2:9b:77:cf:41:fa:
7b:b0:dd:a7:ea:e9:13:2e:63:30:d2:ec:e6:07:92:5d:f1:e1:
6c:1a:92:69:8a:0d:5e:69:4d:7f:b3:e5:78:98:3b:df:8d:6f:
2d:46:91:d6:06:0e:3a:05:40:a5:09:84:8f:33:a9:cc:c5:79:
e6:50:7d:6d:69:6d:79:14:c7:e6:94:29:6f:94:06:86:c1:b3:
eb:3e:06:18:2d:7f:07:b5:76:c3:db:f5:f7:73:3f:06:36:00:
f4:dd:51:f9:f0:35:f1:97:1d:40:cc:35:ef:55:5c:6a:bc:17:
b5:d9:db:f9:f4:6e:e9:d2:33:7c:8a:0b:be:a5:90:c0:8d:09:
82:a8:3e:85:6d:fa:1a:fa:1f:ab:fa:52:e6:94:4c:e1:63:20:
42:30:41:00:b0:53:29:36:a0:ba:8a:49:59:fc:d4:04:0b:4f:
02:08:2b:a9:90:09:19:1f:16:e7:36:43:ae:6b:8d:25:66:9a:
27:a8:b5:03:6c:2e:c6:f1:5d:dd:a4:08:f2:57:6a:6c:7d:25:
fc:a9:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:19 2025 by rpki-client