Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: nSfeXj2dTGLkUeRtoV3HZCZ/hW5QEeTzaAmmwKbMMQc=
Subject key identifier: 07:42:93:BF:6F:75:68:C5:C7:87:20:44:79:37:7E:43:09:A4:E2:1D
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 0199FFC7D7BD76EC483C8AFC8A1ECC2E1163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 04:01:50 +0000
Manifest this update: Mon 20 Oct 2025 04:01:50 +0000
Manifest next update: Tue 21 Oct 2025 04:01:50 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: dlO/nmz02ow75nb79x0Xm4f3bCbTxc+N9EH7mPPPdMI=)
2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d7:bd:76:ec:48:3c:8a:fc:8a:1e:cc:2e:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Oct 20 04:01:50 2025 GMT
Not After : Oct 21 04:01:50 2025 GMT
Subject: CN=074293bf6f7568c5c787204479377e4309a4e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:86:9b:42:7f:57:17:09:b2:c5:ed:52:91:50:
20:5a:77:cf:03:bc:8a:49:4a:4e:67:2e:2b:58:9f:
28:7e:f3:82:76:a0:99:e8:ef:3d:dc:d6:a9:c8:0a:
1b:21:38:2b:7c:6a:5f:d4:b8:c0:f2:1a:b7:12:8d:
2d:6f:74:54:0c:60:21:ee:97:45:da:aa:fd:8e:01:
08:6a:68:77:8d:b5:93:d7:3b:fb:11:9f:8d:bd:14:
76:7e:89:08:7c:58:c7:b2:1a:fb:47:79:7f:15:ab:
52:c7:d6:51:9d:5a:99:97:91:44:3e:61:15:b2:8e:
22:26:3a:c2:d0:78:55:09:f5:10:b2:ef:57:8e:00:
60:bf:be:72:25:26:61:10:e8:87:c2:36:e5:2f:ac:
6c:57:f2:27:2b:26:28:ef:08:1b:53:e7:3a:51:db:
bb:2e:87:43:c1:9b:b8:e2:d8:d6:13:b8:1d:23:06:
76:d5:b3:b5:cf:4f:d7:3f:c9:a4:51:d2:5f:86:73:
67:95:61:ea:f1:0e:23:2f:96:0d:3a:e9:5b:b5:0d:
37:0c:00:22:bf:1d:f2:86:cf:c5:4f:c4:61:ec:96:
01:52:07:14:19:3e:cb:c3:8c:54:ab:dc:4f:ac:b3:
51:09:4a:15:7e:f1:5c:29:6b:94:fb:7e:a3:98:93:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:93:BF:6F:75:68:C5:C7:87:20:44:79:37:7E:43:09:A4:E2:1D
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:b9:46:59:55:d5:8d:e6:fe:c4:42:7d:9e:79:8a:07:7c:
b0:78:74:45:3e:46:07:f8:e4:03:08:11:da:8f:b0:5c:82:dd:
e7:7b:39:d4:7d:2e:ae:76:2b:55:a6:b8:62:bb:60:b3:9f:d5:
fa:2c:7c:aa:b0:c5:c4:86:f7:d4:82:5e:6a:c8:4e:2f:2c:23:
fa:de:3a:b8:d1:fc:ec:bd:7e:8f:81:c9:ad:23:74:78:b4:0e:
aa:3c:4f:03:ba:bf:46:d0:d8:0c:7e:3f:9b:f8:12:2d:5f:30:
48:95:42:76:cd:70:94:18:33:6f:1f:a5:92:00:c8:49:a9:22:
dc:64:d8:b2:07:e8:36:e2:cc:71:e6:b6:ff:d0:33:6b:a9:90:
22:2b:12:11:e7:be:84:d7:39:8c:54:96:17:6c:b9:b1:a8:6a:
ce:4f:f5:3b:ad:37:cd:dc:0c:78:3b:a0:6f:61:2c:49:54:08:
c0:80:52:aa:84:a4:41:73:83:5c:d5:79:66:ce:e4:41:ab:e4:
4c:86:f3:12:76:f0:ee:8b:3d:eb:f0:74:c3:d8:23:ba:17:e7:
f9:f5:b4:25:1d:ad:28:e1:0c:16:fe:1f:5a:50:ba:a4:7d:98:
c8:a6:d9:1c:2c:d3:5c:5b:2e:0c:50:b8:57:8e:e4:5a:57:43:
00:fa:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:49 2025 by rpki-client