Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: VGFMovbL8oxyA1A0yJxVVkmTeCMbQO4idCj1UV7UOgw=
Subject key identifier: 86:40:91:46:98:79:0D:43:65:F2:A0:A2:A8:A3:34:44:BB:EC:AD:DD
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 0199FE46AC8B80276159AEBC29E083F0BAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 21:01:08 +0000
Manifest this update: Sun 19 Oct 2025 21:01:08 +0000
Manifest next update: Mon 20 Oct 2025 21:01:08 +0000
Files and hashes: 1: cB6_dqDkGm0horqNuxQyDYUnIqU.roa (hash: q3CLYq9eWKAdWNRwww5i4XqHOK10EWh8bmYx4jG625g=)
2: dvkQi7LJcacPEnavAtPM4pCT8P4.roa (hash: yFRSaO/fFZoaoBkddBRpfu8JA7wvlMaSX8s3o33YjCY=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: vMp9SAtdCe3bsmWuzME1HK7EDdZpYiKiSyv8txTYYUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ac:8b:80:27:61:59:ae:bc:29:e0:83:f0:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Oct 19 21:01:08 2025 GMT
Not After : Oct 20 21:01:08 2025 GMT
Subject: CN=8640914698790d4365f2a0a2a8a33444bbecaddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:d0:48:a7:6a:5c:7c:4f:13:f6:b9:9e:b8:
7e:af:60:c9:a5:5c:93:5c:53:92:f8:d1:58:06:88:
0a:45:d3:63:68:35:f3:d3:fb:92:f3:68:fc:46:14:
f6:80:10:97:82:64:89:e5:7e:9c:ab:15:c0:2a:d0:
5e:f9:0f:39:de:be:b8:fb:cb:af:e6:4f:44:5f:09:
26:1f:8d:83:30:29:48:0a:30:f5:f2:c1:51:fa:4f:
49:dd:27:97:8c:a4:2b:47:18:b2:2c:86:7f:ac:8b:
25:9b:e4:91:9c:76:7e:4a:2a:b6:80:70:4e:22:47:
f9:8b:a1:fa:da:52:6c:6c:5b:b2:d2:27:6e:d6:68:
63:01:bb:38:d3:d6:44:ba:17:25:28:32:d4:55:78:
75:08:49:81:b9:46:ea:3c:53:1d:a9:a7:f0:17:3b:
67:58:df:d3:e5:88:f6:03:f9:1a:95:5f:1a:1b:ab:
27:cf:e5:a3:0d:32:80:c6:27:f1:5b:b4:68:09:2c:
bf:e5:80:13:44:69:09:9d:a6:26:98:5d:9d:20:db:
bb:02:3c:9d:b4:77:81:6c:a0:1f:de:d2:8a:9a:00:
32:46:5b:16:e7:a9:77:59:e1:d4:6d:bb:b8:46:6a:
e2:74:44:60:67:9a:f8:81:12:25:84:ba:12:b0:f2:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:91:46:98:79:0D:43:65:F2:A0:A2:A8:A3:34:44:BB:EC:AD:DD
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:eb:5d:69:83:a4:d0:34:9e:f6:ff:66:2e:f4:64:8e:c8:6c:
25:c6:1b:9c:45:7d:01:63:c6:95:bb:04:ec:7d:b4:cc:55:4e:
4c:04:59:d8:3b:8b:0b:de:e2:44:e3:2e:76:8e:e2:96:5a:10:
e7:84:16:ce:c5:6c:e6:36:06:7c:54:ec:83:21:d8:d2:f4:f6:
e6:08:19:1c:35:50:64:f7:07:1e:be:f3:04:bb:f5:f6:e6:f3:
ba:dc:24:87:cf:3c:04:a4:49:02:bf:b4:7e:d0:8f:3b:cf:d7:
02:96:32:35:d6:17:12:9d:68:bb:96:10:f6:43:8a:77:d5:bb:
77:a2:2f:b8:c5:f9:32:eb:ba:a1:01:77:31:84:2b:1b:20:88:
a9:8c:9e:22:5e:79:2a:15:a3:0f:5e:9c:c3:dc:1f:82:eb:1e:
d3:9f:02:63:6d:45:00:bf:98:57:2f:cb:ba:03:89:db:4b:b1:
e6:78:37:c2:9d:cf:13:62:48:e3:e3:f5:21:90:b8:5f:09:65:
45:a5:e4:fd:59:2f:f5:ee:2d:39:d6:8c:d7:f7:0a:84:46:35:
33:36:d1:1d:96:79:6e:79:30:14:39:9b:4c:c4:4e:73:c0:23:
ff:87:cf:f3:a8:2c:6b:48:1a:09:8d:40:2e:57:4d:1b:eb:ce:
aa:74:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:44 2025 by rpki-client