Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: vncFeWu+AdUJo15fQDIVgWdxrJeYehMAyFuYFX42C9c=
Subject key identifier: 23:86:D4:2F:E5:E2:52:B7:F2:18:A1:35:47:04:D2:9E:40:57:6A:1F
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 0199FCC66BB74022C91A0C995F19C653F88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: 022A
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: XEatfg0Tk9Kl1lViBPnIbXw5FzE.roa (hash: G4U5UCTvd/mqwuDmGGvlZs+iLYiclpaGMY0aTsyHcfE=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: rEGyGQPEIFfjKsnov7D3tuYneinLvwdXUg1wnpaToRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6b:b7:40:22:c9:1a:0c:99:5f:19:c6:53:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=2386d42fe5e252b7f218a1354704d29e40576a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:80:5e:ca:c9:63:c4:1d:11:33:44:4b:d5:
fb:c5:aa:d8:20:ff:7c:09:a7:5b:08:f1:c7:78:d4:
40:e4:a9:e2:f7:63:6d:50:7e:e5:74:a7:4d:3d:ab:
22:67:39:d6:9a:79:e6:a9:cb:6c:8d:86:75:b8:55:
83:d7:65:c2:1c:14:25:af:a2:37:e4:97:89:17:50:
a4:ab:57:20:38:1c:f7:a0:a2:e3:09:97:68:ad:83:
2c:c7:0f:9c:6c:c6:2c:45:9f:65:c4:3b:94:ec:06:
c9:6c:ad:dd:85:6a:7c:69:59:7d:41:36:c7:66:b9:
38:7e:a3:4a:6c:5a:63:2e:b5:7c:c1:d4:1d:c9:1a:
53:41:4c:cd:50:7d:97:90:94:66:6f:4d:28:21:37:
0d:3d:a5:0d:3a:2d:0d:ba:ba:31:35:8b:84:6e:73:
50:5c:69:47:b8:eb:1f:f3:0b:93:62:f5:2c:b8:50:
57:35:50:30:09:4b:f4:6d:ea:eb:88:87:a4:2b:29:
bc:75:6c:be:1b:35:6c:45:50:86:80:6a:78:8f:bc:
a7:26:86:75:1b:a4:be:16:0c:01:4e:85:77:50:cb:
db:2e:61:a4:c1:df:c9:2d:a1:b8:e5:cb:c2:db:f8:
7c:f3:3a:af:76:5d:a5:c4:48:72:3b:7a:8a:7e:a0:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:D4:2F:E5:E2:52:B7:F2:18:A1:35:47:04:D2:9E:40:57:6A:1F
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6f:8e:c8:b8:95:11:2f:63:17:c4:6a:8d:d5:b4:e0:f4:d2:
59:cb:e6:70:32:a2:4d:04:95:15:b0:eb:92:9c:42:77:9c:6b:
da:02:d9:24:eb:a5:e1:e9:7a:d9:9c:47:9c:3d:54:ed:40:ac:
e7:95:7b:8d:7c:1f:49:82:e9:c4:03:c6:86:8a:fa:f5:0e:c8:
36:8d:a5:7c:40:b6:00:aa:49:58:26:50:15:d4:20:17:f9:c8:
06:62:82:b9:38:18:9f:49:9e:5c:37:1c:20:e1:8a:a8:76:57:
e4:69:11:77:12:10:48:b3:d2:7d:01:fe:62:5f:ab:1f:89:c3:
71:a3:8a:4b:49:dd:3f:60:76:fa:25:31:d6:09:a7:35:53:25:
a1:7b:02:e6:a5:31:db:6c:35:15:9c:e8:e7:c5:3f:00:7e:7a:
7f:c3:3d:7f:5a:8a:d5:7d:86:ba:7b:ce:e8:1d:81:9c:9c:61:
0c:71:72:6c:1d:9c:81:16:78:ee:fe:c4:4a:5e:43:6b:86:00:
2c:d2:42:60:14:e0:1c:9e:72:c3:5e:35:e1:da:12:52:c5:8d:
27:2c:0f:86:50:c9:dc:f6:89:1f:ea:39:29:c4:e8:f9:c8:ce:
b9:bb:b2:62:9a:e0:b7:d7:55:37:fd:a8:c6:71:21:d6:f9:d9:
09:89:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:27 2025 by rpki-client