Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File: fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier: AYqfyZYNzqVe3HiHnvTUqqqmnkie7ldnf6d23ChSQik=
Subject key identifier: AC:32:47:B7:6D:1C:96:8E:17:4B:04:5D:52:E2:1A:5A:BE:B7:33:5D
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer: /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial: 0199FB7D020969CE9711687A77E5B11CBBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number: 016A
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: u/i0AkGoYdVW9+dSakhOSPBf7y21FYimpqWB1Ycmp1Q=)
2: hyvVkmYmp_Y-JQm2DlccYLeH864.roa (hash: VaFEZ5cWbIO/7jTIbMlqrCVV+YCmqTrdOrKl1z8IWMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:02:09:69:ce:97:11:68:7a:77:e5:b1:1c:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=ac3247b76d1c968e174b045d52e21a5abeb7335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:dc:dd:e1:dd:eb:14:7c:8d:43:f3:8a:08:
f4:c2:c8:cb:2b:36:4b:19:6b:c3:d2:98:23:3d:19:
76:fd:67:3b:29:f9:6d:8b:d3:cd:89:8b:9f:8e:9d:
04:30:4c:9c:c3:f8:42:59:7c:66:8d:05:bc:2e:d5:
4f:0e:ef:1a:d3:5b:1c:fe:3e:77:06:de:f3:98:83:
b3:66:e2:31:72:06:de:95:77:6e:47:53:15:80:8c:
f6:c2:3a:fa:ae:e4:31:c6:eb:24:fc:16:e6:e0:7a:
8f:f6:fb:7b:a1:fe:6f:e5:29:d7:c5:fd:17:06:d5:
48:20:05:9d:a7:3f:de:74:10:8c:28:40:d5:0f:3c:
a0:3c:c7:e0:b1:f3:74:93:bf:3b:45:86:b2:8e:3e:
27:6b:7f:f1:33:bd:75:71:45:2a:57:b8:47:c4:af:
70:6b:c6:f0:f5:f8:83:17:0b:2c:18:30:bf:84:17:
90:81:bf:90:8c:57:1c:3b:df:a2:d9:2e:aa:a3:13:
0d:27:05:b6:5d:d8:00:0a:71:db:b2:12:31:46:ea:
e5:b4:01:a7:30:ce:5b:37:54:70:c5:09:fa:7e:1c:
20:09:e2:31:6d:51:4e:dd:e8:af:de:b3:03:b6:a0:
b4:3c:7c:a4:ae:a0:a7:1b:1c:c3:81:0b:02:c2:63:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:47:B7:6D:1C:96:8E:17:4B:04:5D:52:E2:1A:5A:BE:B7:33:5D
X509v3 Authority Key Identifier:
keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:49:28:6d:77:67:22:ae:75:12:d3:e6:ed:cd:c2:10:7c:
5a:48:e2:fd:12:b4:6e:bb:8d:33:93:bc:b0:e8:6f:c4:e6:f2:
58:aa:24:3d:44:06:e1:87:bc:be:8b:7e:d7:55:d5:27:fb:72:
41:47:5d:af:00:25:79:de:7d:52:31:3c:bd:e8:0e:17:8f:a3:
c0:7b:52:0a:70:a3:32:10:1a:55:25:85:a9:40:d4:be:3f:72:
41:e6:3b:dc:8b:48:60:20:e0:1a:1b:11:5f:be:d4:85:9f:a6:
c5:f8:7c:88:fc:c4:c1:23:69:ce:38:6c:0c:53:4a:70:89:35:
77:de:26:2d:27:96:d9:97:54:4e:17:42:2b:22:5c:87:65:15:
ce:04:b7:c9:5d:ac:02:23:eb:95:11:e1:cf:bc:cb:eb:55:74:
ef:69:7d:f3:b6:ad:40:29:73:d3:4d:88:64:3a:50:8f:13:a3:
45:ec:c1:f0:60:a0:8d:a7:77:14:48:7a:33:9b:09:1c:3a:df:
9a:a7:d0:2c:d5:11:d8:24:15:5c:ce:dd:c2:c2:57:28:b2:3a:
0e:17:0a:d8:e1:05:d1:f1:4b:f5:89:5b:e8:d0:a6:cc:28:c0:
cd:bc:f4:4e:df:35:56:92:6b:89:58:18:a1:e7:7a:1c:18:28:
38:84:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:02 2025 by rpki-client