Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: lcDyxGGwCnRx5A8e9oxARATzvkeENiR9j3Wdrgnj1/g=
Subject key identifier: 8A:9C:5E:C9:3F:17:78:49:06:3B:46:F0:42:84:84:7B:67:9D:D0:9E
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 0199FEEBFDBD6D456DA432FC47DD284EDD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 00:01:42 +0000
Manifest this update: Mon 20 Oct 2025 00:01:42 +0000
Manifest next update: Tue 21 Oct 2025 00:01:42 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: 2KtkXljNOBY/+Xg4QQKywISWSm6oZKIhG6eWJv/wndc=)
2: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (hash: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:fd:bd:6d:45:6d:a4:32:fc:47:dd:28:4e:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Oct 20 00:01:42 2025 GMT
Not After : Oct 21 00:01:42 2025 GMT
Subject: CN=8a9c5ec93f177849063b46f04284847b679dd09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:16:67:f8:58:b0:d3:df:7b:ef:9d:3a:26:
0c:c4:d3:3c:5d:79:cc:c1:f9:ec:74:e6:ff:fc:b3:
62:ba:02:63:48:d4:31:81:8e:25:cb:ea:91:6f:de:
dd:dc:54:e9:55:8c:74:34:d9:10:e5:f3:e4:f2:7c:
a1:b6:37:c8:29:db:e4:c8:31:c2:e0:7e:bd:8a:4a:
7a:12:ab:8a:93:c9:c5:ce:70:52:5e:a9:67:86:a6:
99:fe:48:bf:e6:87:8d:75:3b:2e:75:b5:b7:30:33:
40:93:18:3c:d1:eb:92:b3:e2:53:ba:9d:33:3b:56:
41:3f:65:14:bc:06:02:30:57:d1:28:83:01:4a:2b:
16:61:ad:ad:99:e5:0c:0b:11:cc:13:cd:42:18:42:
f7:e6:d4:3d:c8:b8:ff:8d:d9:97:7d:09:35:7a:42:
be:48:24:3d:b4:3d:9e:74:24:48:68:13:d9:61:d2:
9e:b3:a7:15:f1:db:8c:54:a7:9c:48:42:96:df:4d:
3b:77:e4:04:03:88:45:3c:27:43:ed:7e:ee:05:c1:
98:b5:a6:0f:43:78:c9:e2:a5:8c:c1:ec:f3:07:fd:
87:6a:b9:29:e5:52:c7:cb:31:c3:d0:47:f7:96:c3:
cc:2e:29:15:57:1b:77:58:c7:93:1e:9d:ff:2c:95:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:5E:C9:3F:17:78:49:06:3B:46:F0:42:84:84:7B:67:9D:D0:9E
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:e8:2a:f4:8c:5a:0b:4e:a8:b6:63:37:99:30:b1:da:12:
5f:63:c2:26:26:c9:bd:de:4b:42:ba:0d:f4:41:d9:86:1f:e8:
1b:09:ae:68:9f:ae:fc:1c:b2:1e:89:5a:c2:9a:3b:5b:74:af:
3c:53:c6:5d:88:4c:2b:9d:39:7b:c7:fc:0c:88:83:b2:5a:ee:
f8:d7:fe:d6:72:dd:c0:3b:e1:ca:c6:77:5a:17:6b:f4:7f:70:
92:a8:4d:40:d3:c2:f1:af:ac:58:0c:72:f9:e1:49:a4:a3:2e:
4b:75:22:26:a2:32:9a:23:1f:91:6a:62:5a:6a:48:79:07:bb:
df:6f:47:c8:3c:e8:45:48:eb:ff:23:5e:4d:17:64:6b:ed:f0:
1b:0b:4b:c3:14:bf:18:9e:27:af:ab:66:80:79:66:42:18:11:
b2:26:25:c9:57:01:1a:2a:e4:d8:ce:d7:a5:d5:99:f4:a4:64:
75:06:f8:74:78:c6:35:d7:57:ed:5f:c4:b8:d6:41:93:02:9f:
3f:2d:a5:9d:2b:79:7e:46:b3:87:05:71:f1:8b:34:68:7f:7b:
6b:a6:b2:07:db:45:ce:dc:96:5f:9e:1d:3b:fc:58:95:da:29:
33:88:38:7a:ac:ce:97:e3:7d:74:8b:f3:c6:06:7e:fa:f8:e1:
2b:0c:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:18 2025 by rpki-client