Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: yqkfMn3wNegfR7QGGcuD9XcD1JLP/ezkpzdyzL2cSIQ=
Subject key identifier: FF:89:A1:B1:FA:F6:63:A4:91:4F:6C:55:D1:06:E5:ED:05:08:C6:CE
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 0199FBEB040F40665DE5000A87011B33C364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0C17
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: Y3BG8jOO8Ff1aQJ+3lCG/x1eoFQvfSxiRMcaUJNUl0I=)
3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:04:0f:40:66:5d:e5:00:0a:87:01:1b:33:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=ff89a1b1faf663a4914f6c55d106e5ed0508c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:a4:b3:5e:f5:30:65:36:8a:67:07:52:e0:
6a:da:1a:31:88:aa:f4:48:b0:f7:ae:a3:b8:1c:11:
4e:17:d0:7f:8b:f0:1d:af:50:94:e4:cb:05:7b:0f:
8c:f4:1e:99:bb:4e:f9:61:ca:d6:bc:98:6c:23:3f:
e7:60:28:68:11:3c:16:75:0b:88:14:89:79:66:86:
1e:5b:f6:e7:2b:fb:c4:78:ed:54:2c:07:8c:d4:bb:
cc:43:20:f4:14:08:5c:23:03:29:d9:0d:f0:12:1b:
2b:a1:22:dc:82:cb:08:8c:b5:1a:4f:1b:85:3c:ba:
25:39:ac:b0:99:91:6e:49:e9:ca:18:40:a3:95:53:
c9:b0:85:0a:b1:45:75:f6:28:3c:e3:eb:d2:05:e2:
3c:b8:55:01:36:d4:ad:56:41:03:0a:12:2e:90:f2:
ef:b8:2d:5b:8b:15:0a:b1:cf:76:1c:6b:d0:35:7e:
69:0b:2f:78:ea:86:19:e6:38:79:0c:4f:34:93:20:
07:91:7b:56:bb:2c:14:bb:4f:74:0d:d8:d3:72:fe:
c5:d9:22:16:54:69:4f:75:62:c9:f1:0f:6a:d4:a6:
65:f5:75:a3:fd:d9:e6:22:e8:bb:65:d2:1f:79:58:
ce:b0:07:c3:ee:2c:d3:12:69:16:5b:6f:4e:26:24:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:A1:B1:FA:F6:63:A4:91:4F:6C:55:D1:06:E5:ED:05:08:C6:CE
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:78:53:74:b8:9f:fc:e1:17:57:9f:52:9a:96:5f:6b:bc:b0:
c7:fb:32:2f:5a:77:8d:ab:0f:43:f7:99:a6:43:dc:50:22:c6:
79:26:5f:09:90:e8:dd:bb:bd:7b:3f:88:ec:4a:38:eb:ed:5d:
1b:23:4b:b6:6f:7a:7a:86:9a:b5:ef:da:22:b9:80:f0:d2:b2:
01:b5:9e:6b:b4:34:17:ec:0e:7d:b9:8f:3b:8a:b7:ba:e5:37:
32:e2:ff:d6:01:21:50:14:12:e8:fe:e2:d0:9a:85:ab:d6:08:
72:ca:96:82:ab:db:bb:2a:09:27:35:39:e3:ec:a5:e6:d7:76:
26:ae:41:2c:98:01:74:28:89:f6:7a:ac:da:fb:0e:1a:89:18:
3f:ca:fc:69:85:5e:14:2b:b7:8a:34:21:e2:84:7e:40:c3:6f:
fa:ef:63:13:ff:40:17:2d:fc:94:ad:8d:36:09:81:1d:2c:c7:
73:99:d0:4d:60:81:24:24:2b:b7:b1:41:f5:bc:29:63:54:1a:
8d:9c:6a:ed:38:a3:bd:ad:4f:14:71:4c:7d:e8:16:8e:6e:96:
e7:37:7f:a9:fc:0b:53:7e:83:f4:ee:d9:99:71:52:8e:de:b8:
8e:49:3f:2f:cf:f9:4f:d9:f9:93:19:9a:a5:6b:01:6d:a4:96:
49:c5:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:06 2025 by rpki-client