Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: JGnVRn1DiaPCS+rA2W62zmgwboqaUhad9pkRoHBvLSQ=
Subject key identifier: 90:82:78:7C:EC:E7:F6:87:82:1A:BD:04:4F:7A:22:08:66:BB:BB:AA
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 0199FFC77BCE244962A5CE08209B13E21092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 08B1
Signing time: Mon 20 Oct 2025 04:01:27 +0000
Manifest this update: Mon 20 Oct 2025 04:01:27 +0000
Manifest next update: Tue 21 Oct 2025 04:01:27 +0000
Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: hqZCFHgAiKERNWY7MaZYnxJRvO01QKq0PtHbW+SPG2k=)
2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:7b:ce:24:49:62:a5:ce:08:20:9b:13:e2:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Oct 20 04:01:27 2025 GMT
Not After : Oct 21 04:01:27 2025 GMT
Subject: CN=9082787cece7f687821abd044f7a220866bbbbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:30:5b:8b:07:a3:d8:15:b8:1f:89:d7:73:
2c:80:30:82:9a:64:e1:43:13:a9:0c:71:17:a2:5b:
21:b4:27:4c:7a:a5:54:fc:85:7e:d4:0f:1f:5f:1b:
25:48:55:7a:3f:eb:f2:59:5d:82:5c:f1:65:71:ec:
1d:91:03:62:15:f3:2a:61:69:59:d2:73:00:0e:2e:
d5:9f:9f:e0:53:fb:3e:cd:ca:3a:75:82:b4:fa:06:
69:18:a0:ad:64:09:8b:cf:61:74:31:e1:2b:1f:63:
82:c5:b0:b8:c4:10:c8:47:bd:12:a3:eb:fa:72:71:
f8:27:10:94:09:e6:77:a6:ef:fe:0c:64:67:18:52:
bb:75:44:46:e4:19:79:a4:bb:c5:ab:d1:6d:7a:c7:
03:48:ad:4f:fb:39:09:c5:29:05:f3:41:5a:de:32:
d0:11:c5:fc:d2:da:54:f6:ef:65:aa:c1:e9:4a:14:
dd:c7:8a:3c:24:6b:f6:5e:83:cb:d7:5c:f3:06:71:
e8:a2:3c:fc:f2:d3:d4:08:d4:44:c7:77:5d:b7:51:
40:9a:df:31:2b:22:c7:5f:70:19:01:79:7b:ce:eb:
8e:38:b7:27:a5:ad:a9:30:af:fa:d6:09:fc:63:75:
88:97:a5:d9:b0:08:74:05:59:03:d7:fe:0f:6a:f4:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:78:7C:EC:E7:F6:87:82:1A:BD:04:4F:7A:22:08:66:BB:BB:AA
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:bb:72:c4:5b:bf:0e:e3:47:c9:bf:fb:e9:89:7e:8d:77:
5a:5a:0c:78:b9:88:1f:f6:e8:86:20:a7:7d:0a:61:ac:c7:68:
7e:15:c3:84:24:40:88:da:c3:4f:6e:7b:e4:9f:58:e9:9f:e4:
f3:2e:68:cb:b2:60:09:a8:97:c1:ba:1e:17:0e:21:3f:99:d6:
6d:6b:e0:b2:49:97:26:a4:fa:1b:67:d9:37:b3:2c:43:e7:c5:
5a:1e:68:61:03:8d:bf:f6:4d:8a:e7:c8:ee:e8:71:a5:b4:36:
53:2d:26:b3:35:37:56:24:5b:8d:6a:45:7f:82:5b:01:4f:9a:
a5:c6:de:c7:28:ea:e1:e9:28:d6:1d:c0:42:f3:42:33:4f:7a:
9c:5c:08:e6:cd:f1:cb:91:c3:28:bb:a3:45:53:d0:f7:fe:f0:
44:b3:9b:31:b1:70:3c:7f:21:3c:2c:9d:3a:0a:55:d7:ed:59:
e1:4d:24:f1:f8:b3:f8:5a:2c:4f:55:a3:21:37:35:03:0e:b7:
03:08:d4:4f:35:24:30:b1:7e:57:f7:b1:47:ef:77:60:b5:11:
c7:a0:d1:1e:7b:65:de:48:5b:a4:fe:d9:a2:af:00:ab:48:26:
e1:26:98:81:93:0b:1e:f2:a4:91:76:94:57:2c:bd:fa:4b:ec:
64:59:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:26 2025 by rpki-client