Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: H2Q6GUYCJ+tofUgVmSLmuL7AS8ndQuCaveqofMIqTU8=
Subject key identifier: 6A:0D:68:5B:52:2D:BC:69:E9:AE:5E:33:DB:DB:86:66:86:51:91:87
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0199FD6ADA5130218EEE57503CACDBDDC45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: 7V9iO/uGeyYE882mC/9T/rdtheMarSRfIXMgZlDlkLQ=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:da:51:30:21:8e:ee:57:50:3c:ac:db:dd:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=6a0d685b522dbc69e9ae5e33dbdb866686519187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:a8:ad:89:9c:f5:20:ea:f2:a5:9e:24:35:
14:92:4a:b3:c6:c5:36:03:81:aa:c1:af:90:21:71:
f8:0c:5f:34:ba:38:1f:27:09:36:4c:de:f3:21:75:
67:82:10:68:fd:1c:19:37:04:b4:34:48:38:d4:32:
36:45:af:af:96:b8:7f:c0:35:e2:8e:ae:cb:70:df:
d4:4d:56:7a:d4:c8:46:66:01:96:7d:17:f3:be:d4:
f4:9d:5f:65:f1:14:51:66:b0:fb:0d:b0:d8:f7:36:
30:2a:b0:75:78:95:22:f2:5d:71:a0:9a:ad:96:1a:
8e:99:3f:be:86:ee:76:04:b9:43:55:16:2d:3e:36:
b8:57:30:db:8d:8e:74:ff:94:5c:11:5e:38:ca:cd:
5b:9c:01:81:f5:00:19:99:d1:2a:8f:06:e7:ea:b7:
11:29:bb:e3:1d:3f:fb:27:76:08:94:87:be:3d:fc:
e1:e5:05:b6:55:6c:4b:94:6f:ea:39:8f:c3:d5:ad:
3f:a8:7d:12:a2:3b:90:1a:36:9e:1e:06:b6:ad:01:
b7:02:97:b2:e5:7a:db:26:34:67:0d:d4:ee:8e:cf:
ab:69:92:ce:5e:86:6c:ce:f5:82:1d:2f:82:b1:d9:
f0:9f:08:6e:6d:60:23:6d:46:5d:de:cc:18:e6:1e:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:68:5B:52:2D:BC:69:E9:AE:5E:33:DB:DB:86:66:86:51:91:87
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:25:01:72:3d:63:1e:7d:78:45:33:63:c3:0e:3b:0d:fe:34:
40:ed:32:fe:2e:68:97:10:90:b1:fe:4b:fa:3d:75:6d:83:4a:
d5:08:5e:4d:bd:05:ed:fe:6d:65:36:18:5f:99:9e:5a:c5:22:
fe:bf:0d:bf:bf:17:71:6b:6c:2f:e5:d4:38:bc:19:9e:11:bf:
22:dc:e4:ac:e2:a3:d2:7e:32:8d:c3:f4:8c:3a:59:f9:7a:47:
97:05:90:55:73:62:c9:e0:8b:5f:ac:cb:71:41:34:a9:ba:7e:
23:c4:c0:ef:1a:1a:b0:55:2e:d0:9b:31:78:b0:3b:ba:dd:da:
b5:46:c0:c8:77:e0:53:93:78:fe:dd:ba:13:4b:1e:41:b2:d5:
92:97:32:b7:d9:cf:49:c8:c1:b9:16:e1:8a:c0:22:4a:47:ae:
45:9f:e6:b9:0d:3f:a4:8b:44:1d:5d:49:77:93:ea:b2:c8:9c:
3c:89:74:7d:b0:7a:26:a1:c5:50:84:1f:ad:a8:af:9f:e1:c3:
c0:b7:19:16:4f:23:0a:6e:33:7f:80:e2:6d:da:78:8e:c8:ee:
87:cb:c3:4f:30:a8:3c:c7:c8:c5:6d:17:7f:b9:cf:ff:44:b3:
92:8d:3d:eb:ad:02:91:85:7a:fc:82:32:26:2d:1a:dc:c2:7f:
a4:93:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:42 2025 by rpki-client