Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: 5pwUpJ8h6SSHJwPUXcV0wuUfxL4kEAMdJkTRjKZadDk=
Subject key identifier: 02:84:28:8F:B6:3D:4D:41:03:FB:DA:48:DA:A3:A5:93:4D:CA:5C:4F
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019A03A3AFA4C5B21262A690D0A4BD85C8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 108F
Signing time: Mon 20 Oct 2025 22:00:50 +0000
Manifest this update: Mon 20 Oct 2025 22:00:50 +0000
Manifest next update: Tue 21 Oct 2025 22:00:50 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: bZKl6SgMLHs+Av3w+W9/tZrM60J21KQyp63PxrxVGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:af:a4:c5:b2:12:62:a6:90:d0:a4:bd:85:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Oct 20 22:00:50 2025 GMT
Not After : Oct 21 22:00:50 2025 GMT
Subject: CN=0284288fb63d4d4103fbda48daa3a5934dca5c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:a7:f5:0b:68:fe:8f:41:76:6c:8d:20:4d:
c5:b1:8e:14:e9:f0:22:1d:92:1b:4b:fc:79:97:81:
4c:71:95:3c:27:88:b2:50:5c:96:46:c9:1f:d0:54:
e9:b6:fd:49:0f:5c:88:4e:1f:4a:2a:f9:50:da:7b:
7f:92:77:ef:09:35:5f:80:38:0a:20:79:20:f9:50:
93:60:56:67:36:a2:16:b1:a6:c9:91:17:e0:e3:24:
70:67:bf:7a:8c:5a:73:1d:2b:ce:d9:4e:0e:6b:f9:
b6:d8:2d:0f:5c:64:f6:73:e9:3f:89:52:fb:8f:bd:
72:56:bf:54:bd:78:9b:a5:79:f1:7c:69:44:73:35:
58:ec:a3:a6:91:68:d3:77:96:f5:f9:bf:27:02:cc:
1b:1f:a5:4a:b0:a3:bd:bd:68:f6:df:28:7d:2a:0d:
4d:8d:c6:81:3e:ed:db:34:ef:3e:b1:4f:13:6a:f0:
c3:5f:e4:b7:73:62:ae:ac:28:59:b8:ad:89:aa:9f:
b6:12:79:b2:b8:96:27:0b:b4:07:f6:8b:13:4b:09:
b3:d2:4e:aa:9d:59:21:dd:90:56:6c:7b:07:0b:9f:
ef:3e:fa:58:e6:de:df:5d:a7:36:9e:35:25:aa:ca:
ea:4b:c8:49:b7:93:92:01:bb:f4:5d:a6:08:30:1a:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:28:8F:B6:3D:4D:41:03:FB:DA:48:DA:A3:A5:93:4D:CA:5C:4F
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:84:6e:38:a5:d8:76:6d:3d:d7:ed:d6:4f:78:5f:cf:2b:bb:
63:c4:d2:bb:3a:b5:cb:1b:3e:ce:57:ea:31:b2:ed:16:d8:dd:
91:d6:2f:ba:4c:1a:5f:be:e8:81:09:aa:aa:76:10:61:0e:2d:
bb:47:d0:40:0e:e3:92:82:ae:47:25:64:75:b3:f7:b6:23:b5:
d1:10:6b:f3:a0:6f:3f:b8:ff:00:13:6d:9a:65:8d:c5:28:df:
4f:88:d8:57:67:e2:ab:e9:0d:10:d1:bc:ed:0f:1f:df:81:20:
90:95:07:c4:a4:5a:ac:fe:8b:79:96:4c:8c:5f:2c:a9:fb:d3:
c7:6a:b7:4c:06:bc:53:f2:f5:85:65:db:99:42:0d:f4:7f:2d:
99:50:d0:db:18:93:58:1d:dc:35:72:44:6c:c7:0d:f1:44:d5:
60:b4:56:a6:30:cb:35:07:e7:44:24:b6:fa:e4:79:4c:57:1f:
8d:05:bd:bf:0e:c6:08:3d:51:f7:7f:5a:74:3e:a7:25:d4:55:
9e:fd:cc:b6:ca:7c:52:ab:e2:e1:9a:5c:05:a4:56:d2:42:ee:
b8:6d:19:44:76:8c:95:20:cf:5c:17:33:df:a8:f0:dc:c4:a0:
2b:ba:bf:19:2b:f9:1a:6d:b5:c6:4c:b7:d0:0f:1a:b7:da:18:
24:ce:86:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:27:56 2025 by rpki-client