Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier: 6WTAG03M/22byZQkCztHZXVWTxwokBnTUYbsKHgFSMY=
Subject key identifier: 0C:0B:E3:21:DF:63:AC:44:F0:26:FD:EA:DE:7B:83:E4:94:7D:1B:71
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial: 0199FB45B128FC440597C8AC45E68DB6486C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number: 08A7
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: YaXOJIJcJ9SWYCH3x+az5+1XnJTGuHbpsiSyyklxVok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b1:28:fc:44:05:97:c8:ac:45:e6:8d:b6:48:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=0c0be321df63ac44f026fdeade7b83e4947d1b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:3d:79:9c:45:c2:e8:c1:4e:28:92:20:77:
cc:d9:2c:1f:04:73:f2:85:00:0b:95:98:9a:d9:98:
db:54:13:24:f8:1b:48:18:b4:c1:63:c5:3c:9e:d4:
7f:1e:ac:3b:cd:53:33:d6:67:7e:a8:ce:b6:6f:38:
fe:7f:92:b3:d8:7d:23:fb:70:6b:af:d9:f2:e7:00:
c2:10:9e:4e:72:e5:c7:27:3c:24:a3:bf:46:00:b0:
c0:7d:cf:f1:5b:f9:1d:21:88:48:65:60:95:d5:fc:
fb:26:d9:68:41:72:b3:51:26:5c:6e:0f:85:17:e1:
80:ea:22:35:27:f6:7f:bb:d5:a7:4c:96:84:77:0a:
63:6d:c8:b0:ed:44:45:d8:9e:a8:9b:0c:a1:e4:b6:
d9:cb:78:99:fa:19:5d:f3:c2:36:b7:58:b7:72:9d:
89:47:e9:c9:67:d0:fd:0f:12:99:9f:1a:99:c9:fb:
b8:6d:91:fa:84:96:d5:2e:3d:b4:99:73:07:c3:e7:
90:17:02:d5:5b:c7:b8:a4:1b:eb:66:8f:07:5d:a0:
c9:58:75:ab:65:c9:ab:2a:06:a8:f5:eb:45:b7:56:
fd:96:2c:a0:9f:1f:2a:70:95:d4:b0:00:90:ad:78:
a2:32:e8:cb:b4:18:eb:ed:95:84:d0:1f:40:59:7c:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:E3:21:DF:63:AC:44:F0:26:FD:EA:DE:7B:83:E4:94:7D:1B:71
X509v3 Authority Key Identifier:
keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:21:53:9b:67:6b:44:c8:40:39:87:c3:f4:a2:48:84:04:c6:
0f:b9:b2:80:c1:06:a6:fe:5e:f8:a2:17:45:b0:ab:61:b6:76:
04:c1:26:aa:b5:9d:ba:25:97:06:a1:df:50:af:50:9a:8e:e7:
6b:45:35:69:0b:2b:b3:e9:79:84:aa:2b:00:f1:eb:5c:3c:28:
5d:6f:9a:05:d5:a8:10:e0:d4:a9:42:14:02:3f:42:a4:38:f1:
bb:6d:3e:8c:7d:24:c0:15:51:17:c5:ef:2a:13:d5:bf:2e:db:
15:16:1c:2d:48:83:3b:d9:ba:db:49:cb:4c:cc:c1:64:84:f2:
26:99:74:12:36:0c:d5:57:5b:0d:5b:d7:0f:94:a4:cc:a4:40:
12:5a:ac:3d:ba:2b:64:6d:94:fd:67:34:32:db:41:59:1b:02:
21:91:59:2b:d8:e3:25:28:1d:a2:be:4f:e6:f4:3d:7d:15:7a:
56:3b:d5:ae:42:6f:5f:e5:0c:4d:f2:14:8b:e2:92:00:79:03:
76:2c:d2:1c:08:20:de:24:66:69:9e:95:2a:b9:16:39:c9:92:
4b:42:6a:23:a2:91:34:3a:08:c4:87:00:22:c5:8b:20:1f:46:
14:8b:23:8d:a1:ee:65:25:11:c8:1f:4b:73:a5:a6:62:bd:1d:
2e:8d:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client