Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: 2yxKcskr17QP2wzJtugTLxsMfq0DE+GbWbQXvAfQZvE=
Subject key identifier: 43:0B:9E:10:12:EF:A2:19:A8:F5:96:3B:B1:F5:67:66:C0:BC:D3:DF
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 0199FCFD2A558D9083E6E7C63C1432357AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 01FC
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=)
2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=)
3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: F19m3tG2ZKzHSP0PT3ZvrcrUxifSVT72+9yP8pyfkhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2a:55:8d:90:83:e6:e7:c6:3c:14:32:35:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=430b9e1012efa219a8f5963bb1f56766c0bcd3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:d1:a7:5e:7a:d1:50:c6:40:9a:41:da:46:
ef:10:e9:ff:96:89:24:fa:3c:41:a5:39:15:1a:19:
1d:37:eb:56:d5:5d:6e:19:bd:a4:ec:bc:3f:7d:dc:
f2:f8:58:87:10:38:e0:7f:4a:46:33:8c:17:43:a5:
cd:8f:0e:a3:97:69:87:0f:b5:be:1d:75:4e:e1:72:
5e:79:6a:04:3b:72:f5:84:d8:27:c0:23:6a:68:b8:
74:7d:69:08:d8:49:e9:90:cd:bf:27:9d:a3:82:dd:
4a:b7:7f:8d:28:c7:54:92:61:a4:ab:d2:92:f1:d7:
20:df:fb:7e:f7:15:8c:b1:56:f0:e3:b1:2d:15:4b:
7e:db:1d:86:e1:aa:0c:3c:c7:f8:a3:69:df:1c:c4:
03:83:78:4d:b5:b7:ab:73:bd:07:3d:ba:55:4b:6c:
8c:5e:01:d6:b4:d0:60:07:74:7d:b1:8b:ef:71:46:
b9:c4:29:e4:c5:ec:21:e5:15:ae:cf:91:6a:ee:9d:
df:45:89:73:b8:b8:b7:c0:b5:4c:a6:9f:b8:a1:a8:
a9:1f:8e:e2:b7:fb:88:9a:67:c5:a9:4c:c1:e1:d8:
3b:7e:71:b0:e3:de:51:57:ac:13:8b:c5:22:fd:1c:
9c:2d:45:17:bb:01:3e:cc:7b:f4:10:91:3e:8a:7b:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:9E:10:12:EF:A2:19:A8:F5:96:3B:B1:F5:67:66:C0:BC:D3:DF
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:3e:0c:aa:18:f2:05:05:44:37:3c:0f:30:8d:04:a2:42:
ec:f1:55:c5:6c:7f:f9:4d:e0:c4:bd:0c:a3:c6:29:c3:96:54:
a2:c4:7b:75:2b:48:7c:1a:bc:87:80:44:0a:22:bd:3d:56:e2:
36:97:05:7d:45:f0:ff:a0:6c:27:25:41:3f:25:6d:fe:f6:15:
7d:84:81:67:75:aa:cc:37:ff:54:e0:14:73:91:f9:57:3f:e3:
8f:b7:c8:3d:a9:59:30:0c:e8:9e:3d:a8:0c:3c:3e:3c:26:ff:
6d:d9:69:a0:86:47:73:7c:6b:cc:a5:08:66:e2:e4:5d:35:a6:
18:cc:5f:77:ae:39:64:ab:3a:83:f9:6d:9d:26:39:aa:c8:c0:
5f:a7:2f:80:37:5a:f6:e6:fe:58:81:98:1b:9e:53:54:d8:b3:
fd:b8:33:25:3b:42:10:ec:b4:9e:c0:33:d3:f7:d4:1d:91:bb:
0a:92:ce:bd:5c:0f:0d:3c:6f:29:44:07:a7:ab:02:17:39:26:
3b:af:22:67:cd:1a:89:1e:18:88:2f:ce:f8:1a:68:97:d7:db:
2e:c1:65:bb:54:8e:66:1d:24:d4:32:35:c3:8e:e6:9c:bd:97:
52:01:68:58:7a:5c:bb:f4:c8:85:78:d8:a2:7f:18:d8:61:1e:
93:29:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:58 2025 by rpki-client