Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: Fg/DXVwuVVM14bfl66CV+hthGCr63e6TR/n6jQi8Xsw=
Subject key identifier: 8D:BD:25:A8:5F:F7:25:13:53:AC:E0:C3:69:75:E5:0B:0D:1E:6D:19
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 0199FC21BEBC6D1E2E08C6FB1B597FF5AB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: dzoBnSx5LT/DtN5n2JRtSwdIyIfBC33N4Stc1lUTjoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:be:bc:6d:1e:2e:08:c6:fb:1b:59:7f:f5:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=8dbd25a85ff7251353ace0c36975e50b0d1e6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:ec:c9:17:21:51:a5:84:83:7e:e6:fd:b6:
4b:1e:45:3b:b1:14:bb:16:ba:1e:f1:28:a4:7e:43:
60:cc:f8:86:5e:f0:b7:9f:bb:95:cd:f2:8e:d4:28:
cf:83:bc:1b:0c:62:f8:fe:5d:c8:dd:eb:6c:dc:cb:
25:c3:d2:47:41:dd:8b:3a:84:01:98:e7:c7:bb:f9:
64:4c:7c:f9:58:3b:27:ce:08:f0:d0:d5:20:f4:d5:
09:6c:3f:00:75:60:1a:50:0f:1f:02:18:1a:49:91:
46:95:96:95:aa:81:f0:c4:af:74:ad:b1:5b:6d:3a:
10:0e:4d:a9:d9:bb:40:11:44:27:e4:c7:27:23:41:
67:ec:85:86:7f:c9:dd:d9:5f:9e:13:48:e3:ab:1a:
15:1f:d5:6b:84:88:21:46:34:db:00:e5:51:d3:6d:
02:b4:d4:bc:44:15:74:99:cf:f1:77:79:3b:32:fe:
d8:08:bb:d8:f6:d8:de:ec:85:70:94:71:9b:c4:07:
63:ac:9c:09:e6:2f:4d:14:cb:63:81:74:74:ae:14:
44:7d:9c:a8:6c:dd:3e:d0:dc:10:47:62:f2:50:10:
a7:b8:a7:fb:2f:4f:b0:f3:b0:50:98:a4:a5:f5:2e:
6f:2c:d0:fc:be:cd:f8:39:a6:8f:cb:84:c7:25:25:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:25:A8:5F:F7:25:13:53:AC:E0:C3:69:75:E5:0B:0D:1E:6D:19
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c1:3a:bc:18:1c:90:f0:47:2f:77:05:fb:e5:0f:98:79:fb:
01:85:a7:5f:f0:ce:97:7d:1c:7b:38:50:a0:dd:b4:9c:ca:cc:
9c:b4:94:5b:50:55:93:03:33:e6:79:e0:9c:34:e5:26:e1:15:
c0:c3:92:ff:38:31:3f:cf:55:4f:5f:10:ee:1e:b0:79:ec:c2:
3d:89:35:34:59:be:63:a8:bb:5d:e2:7c:43:25:e5:1a:d2:3a:
2f:eb:3e:76:7b:a8:a7:3c:3b:88:90:89:a1:d0:2b:f0:5c:c2:
cb:f1:e5:26:72:10:fc:ce:e1:3c:81:d7:13:bd:ca:21:02:33:
75:6d:11:1f:f9:e3:84:1b:c6:ca:b7:64:78:c5:58:cc:44:d4:
98:36:05:90:5f:65:d9:5b:c3:58:3f:4b:93:a3:12:15:69:66:
9d:dd:21:af:8c:37:dd:7f:e8:9a:01:d1:28:0b:9a:c7:30:4a:
cc:2e:89:c3:7f:19:97:7a:a8:4e:05:f3:07:da:76:7b:b9:0a:
40:bf:f4:27:de:3f:7e:2f:a7:15:56:2a:b3:01:c2:e1:0f:31:
6b:47:86:34:5b:d7:37:02:d1:b5:ff:f4:4c:5d:90:c7:50:8a:
cb:d6:48:92:f6:1e:c9:df:c4:75:98:a4:f6:fa:22:51:f1:97:
94:fe:e8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:38 2025 by rpki-client