Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: 7MIFR6sAF5Pz9mLrhchYXpNPFCACZ04EuUx1+K8kvzs=
Subject key identifier: BD:B0:98:3B:15:D5:8D:CF:AA:FB:14:AB:05:8C:40:6B:EC:AF:BE:44
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 0199FDD9B606E7A10A4F5B1A1A14F8352D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 10AF
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: DvI9wBXcfXbrrwBAu2oUpUGE9XyHWSEk27DQFvqyhV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b6:06:e7:a1:0a:4f:5b:1a:1a:14:f8:35:2d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=bdb0983b15d58dcfaafb14ab058c406becafbe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:bd:37:ab:e1:09:45:3c:a3:d8:2d:03:2d:
4b:7d:f5:39:0a:6c:fd:fa:01:90:52:46:dc:95:3c:
58:cd:54:49:37:63:f2:1a:11:f2:0a:47:39:91:2a:
d8:48:83:f1:49:24:ad:a1:64:43:cd:c0:c2:95:d9:
c8:3e:71:f3:4c:4e:ef:8c:39:12:35:03:b3:b2:eb:
56:2d:ae:e5:96:1e:2d:f8:80:c3:04:b7:fc:2f:69:
0b:d6:48:9c:33:7a:e5:95:05:f1:82:be:38:68:18:
78:83:03:65:d5:95:e8:6a:65:7a:72:0d:74:64:f8:
bd:35:35:b7:f1:2b:f0:ed:dc:c9:43:28:62:0c:b9:
d3:5a:c5:88:00:68:18:a2:50:39:22:79:71:04:6c:
b0:4e:89:3a:e1:5b:5a:a4:86:ae:fd:12:a4:d1:75:
bf:49:ee:d5:e6:b3:06:ef:aa:ab:c3:77:b4:9a:0c:
9b:59:90:7b:0f:3f:34:a7:c4:65:cc:2d:b0:f6:2e:
23:39:03:b1:73:a9:d1:93:85:c9:47:77:24:11:2b:
40:6b:a9:73:0f:ab:98:8c:37:7f:9a:a4:c3:be:57:
a3:ec:b1:8e:28:a8:30:79:4d:63:a7:13:20:5b:63:
c6:a6:3d:49:31:30:a0:d5:c1:5d:51:c2:09:d9:0a:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:98:3B:15:D5:8D:CF:AA:FB:14:AB:05:8C:40:6B:EC:AF:BE:44
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e9:7e:cb:5f:14:c3:f5:44:c7:cf:8f:f1:13:ed:72:26:fe:
9b:cf:8d:e3:3c:de:91:a9:5b:49:83:7f:50:ef:09:43:e6:fa:
55:30:88:fa:4d:9b:77:af:30:b3:2b:39:b5:eb:bd:d1:18:6b:
60:2b:24:cf:ce:ea:14:bb:09:5a:ce:f6:29:2c:86:b2:b0:c3:
e6:d3:0a:d4:e4:5e:f2:08:cd:1a:72:e9:b7:f6:81:ae:5b:2a:
f9:3e:22:55:09:77:22:8b:6f:6f:00:8f:3e:0d:70:a9:4c:a6:
07:9a:fe:d4:7c:a4:b5:90:74:4c:90:a3:22:e3:f1:1b:0c:c4:
ab:65:1c:ca:30:85:4b:09:a8:62:a1:1e:be:9b:f2:25:6c:ac:
df:b0:bf:3a:22:39:f0:5f:7a:d5:31:9d:22:0b:93:f4:2f:94:
c5:5b:ca:ac:78:f6:55:20:33:c6:b1:aa:6d:f9:bf:3d:a7:72:
a2:9b:96:6a:df:b3:c9:d2:b9:9a:25:91:f4:5e:4b:a3:ba:d4:
dc:b7:73:da:04:4a:be:0d:cc:8e:96:e5:8b:fd:1f:93:c1:91:
37:11:bc:74:84:a7:05:92:0c:27:24:14:39:6c:10:af:da:98:
fd:4a:b5:9c:fc:7e:71:78:2b:da:3e:f6:1b:b4:9f:d3:a8:f0:
0c:d1:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:54 2025 by rpki-client