Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: kZjldrAxOgJXuPON4ApE7rFZb6PMHmbl1i+q6CazQPg=
Subject key identifier: FC:7E:DB:89:FD:51:80:1A:85:0B:19:B7:ED:39:34:89:8C:4A:37:39
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 0199FA6A4436976DEAFD0664ECF0C5815A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 3B
Signing time: Sun 19 Oct 2025 03:01:32 +0000
Manifest this update: Sun 19 Oct 2025 03:01:32 +0000
Manifest next update: Mon 20 Oct 2025 03:01:32 +0000
Files and hashes: 1: F8wvoV2Msd-SeHr6PBjzhXHOGKU.roa (hash: GfnGToHeyWjARTLRd2eGQHQuQH+P8p0dtRcm2xvmJe4=)
2: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: u5aPf3RX/cn6AHpIeUQ9eNfRvCUhh+6fVd1AvyXTFGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:44:36:97:6d:ea:fd:06:64:ec:f0:c5:81:5a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Oct 19 03:01:32 2025 GMT
Not After : Oct 20 03:01:32 2025 GMT
Subject: CN=fc7edb89fd51801a850b19b7ed3934898c4a3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:04:fb:33:58:4c:5d:c2:d9:db:96:14:9c:
45:1c:7e:37:72:0a:2a:dc:ee:eb:5b:4e:9d:4b:01:
b6:b6:9b:49:27:6b:2b:c7:c2:b8:97:ac:c2:ae:c3:
15:e9:44:cd:60:df:92:ba:12:1b:85:18:f8:e4:72:
94:bd:4f:72:18:c7:12:ec:bb:62:81:de:03:d2:9f:
d1:73:ba:e1:1e:6d:a2:06:fe:d2:36:b8:66:d7:10:
87:72:fb:68:ca:ee:bd:6e:ea:79:8c:58:fd:2e:11:
45:84:9a:f6:0c:d6:73:f4:5b:f9:87:90:71:b9:c1:
67:ec:15:88:f9:94:64:77:07:2d:20:f1:13:e3:15:
b7:95:38:70:86:ad:17:8e:e2:0b:4a:49:90:cb:c3:
b1:ed:03:f9:96:e5:5b:07:54:5e:75:5e:bb:0c:b3:
16:8b:49:e4:a4:bc:88:6e:49:53:fa:22:fc:1c:2f:
10:ed:eb:31:d8:32:a7:8a:91:37:9a:89:5c:dd:ce:
34:c4:f7:3c:fa:de:56:ad:ea:a4:61:ae:10:f8:50:
2b:0e:d2:d1:3f:17:72:5a:a9:35:83:88:4c:5d:11:
3e:2d:cd:fb:36:e0:a3:73:f7:22:24:01:f2:32:0e:
a7:a5:cf:a3:eb:1a:f1:f0:90:2b:24:0e:1b:0b:f2:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:DB:89:FD:51:80:1A:85:0B:19:B7:ED:39:34:89:8C:4A:37:39
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:f6:32:18:36:0e:92:72:f5:9c:eb:72:b9:46:fc:13:2f:
6d:64:62:7f:18:62:a3:19:d3:d5:dc:43:54:b1:93:e4:1c:08:
a4:01:85:5f:be:7e:c5:49:27:2b:e0:e3:8c:98:3f:72:d5:82:
da:0c:71:41:50:a9:61:81:15:4d:9f:bd:a3:cd:16:a9:ec:a8:
f5:be:0c:55:dc:7a:5a:e3:86:64:af:af:0d:da:4d:e2:9c:bd:
e1:ad:a6:11:12:8a:78:b0:c1:a3:cc:a3:cb:01:38:ef:a3:e9:
49:14:03:db:33:7c:67:5c:a4:e5:7d:df:01:4d:f8:77:38:d6:
c7:dc:42:79:d0:ac:3d:5b:53:9c:39:87:5e:6f:fb:ab:8d:53:
8b:2a:18:ae:60:16:d4:ca:06:7f:27:56:9c:47:60:4d:ce:64:
d0:4b:16:59:7f:93:a1:cf:95:6f:54:89:c2:11:16:76:d7:54:
4e:df:67:d0:76:12:21:72:1f:ef:5d:0f:93:ac:c3:98:46:10:
43:ba:a0:26:d1:27:4c:46:73:60:6e:54:6a:60:aa:e9:e6:a5:
61:24:1d:2e:30:3d:4e:2b:ca:41:89:aa:59:2c:ce:80:4d:0e:
f8:6a:c3:b8:ab:85:7b:7d:e4:43:9c:b2:50:0e:2d:fa:c0:c7:
7f:1b:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client