Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: CCsZzclGOnbEXQNhMvrpfnyXQZvHHpb7y7ichZEheKs=
Subject key identifier: 2B:8F:57:2E:43:C5:0A:35:8A:19:DE:AF:84:94:AE:6B:DA:55:2E:0E
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 0199FCFD398A1F29B2660134CC165C9AA248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 112B
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: /X96gJ1t1RLDlMi/+ddHwWOlPJMSeGo4F5Fk+8auPu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:39:8a:1f:29:b2:66:01:34:cc:16:5c:9a:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=2b8f572e43c50a358a19deaf8494ae6bda552e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:bb:a8:a7:65:d5:1c:51:f1:9c:8e:14:f2:
e3:a4:6e:6e:e2:f0:f9:4c:01:01:b7:40:82:4a:c9:
55:ff:01:4c:e7:a1:86:ee:35:7a:86:21:59:55:ea:
47:1a:aa:05:81:44:5d:69:f9:a3:ad:c5:08:b9:e9:
74:39:a0:14:b1:ce:e9:a4:f2:65:22:07:5d:81:df:
88:67:e3:eb:af:3b:fe:6c:29:75:d5:8c:0f:a9:70:
83:eb:7e:4c:38:72:b1:81:79:41:85:dd:2a:ae:58:
bf:90:9a:02:41:0e:06:15:74:fe:43:17:f6:d8:2b:
30:57:12:ba:73:88:3e:9e:c7:bb:ae:9b:27:67:fd:
ba:b8:fd:31:86:08:e8:eb:e5:36:8d:9f:0e:38:20:
ef:ee:77:7b:13:72:58:e9:a8:89:e4:f3:e7:73:39:
be:8c:02:6d:56:07:98:ee:1a:91:c2:8d:39:91:1f:
bc:2a:5c:1a:08:72:c3:89:8e:38:1a:59:b0:89:cf:
c2:d0:0f:4a:84:a2:c7:c2:e9:85:2c:b5:7a:00:85:
f0:c1:88:ac:96:de:f5:7b:c3:f3:f0:bb:b9:0e:a5:
d8:ee:bb:c4:91:63:af:bf:ec:d3:39:e2:3a:7e:84:
db:ef:e6:5b:32:74:a1:bf:ed:c1:5a:cd:20:ed:a6:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8F:57:2E:43:C5:0A:35:8A:19:DE:AF:84:94:AE:6B:DA:55:2E:0E
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:8c:0d:49:bc:b7:f2:df:b2:4e:d2:7f:43:65:9e:2e:3e:
ea:02:b3:09:78:0d:58:ca:ee:1a:95:82:df:34:88:1e:96:08:
eb:4e:94:4c:48:c1:88:9a:09:8a:87:22:0c:77:cb:d8:87:26:
c3:b2:d1:ea:68:d5:38:52:b8:dc:5f:10:aa:1b:a0:3f:1e:0c:
fa:aa:8b:98:9e:8c:10:15:f9:21:16:79:b2:b0:ba:92:e2:b5:
50:70:d3:4e:8a:50:82:9f:0f:5f:48:54:95:3d:99:e7:66:16:
4b:dd:ab:58:9d:18:c1:b8:af:a0:41:95:5b:b5:f3:72:89:5f:
9f:ee:eb:7b:e0:bd:ba:b6:9c:32:58:56:1e:4e:06:ef:10:1a:
ea:f2:37:8c:36:9f:cd:cf:90:88:c7:13:f7:b7:f2:85:e1:aa:
91:b8:10:e7:b3:44:c1:d6:26:5f:64:50:86:05:0e:31:14:5e:
36:16:6e:4b:75:3e:99:eb:7b:13:ae:bb:45:50:9a:8e:de:f5:
74:55:76:9a:3c:a1:2a:c9:79:0e:0d:c2:d0:03:04:20:e1:fc:
de:9d:44:35:69:c6:bc:c3:e4:7a:11:26:be:b0:1a:89:16:a3:
15:78:02:86:6e:91:3e:9f:2f:b0:d7:6e:85:9d:d8:21:a1:d1:
9a:fe:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:54 2025 by rpki-client