Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: jGOEDCHnAPbvmePwxPh8gJgiLgG3cV+iPNEmVmDc538=
Subject key identifier: EE:D6:49:F4:FF:AC:22:5C:D8:02:1C:78:37:AE:B9:AF:F6:98:5E:F9
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 0199FE0FFACBFDE3021BE8505FB58B64DEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0FAD
Signing time: Sun 19 Oct 2025 20:01:24 +0000
Manifest this update: Sun 19 Oct 2025 20:01:24 +0000
Manifest next update: Mon 20 Oct 2025 20:01:24 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: PQSvELOXcErfjRvWQmoTegijiItdR7v4BQzODw+yTNc=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:fa:cb:fd:e3:02:1b:e8:50:5f:b5:8b:64:de:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Oct 19 20:01:24 2025 GMT
Not After : Oct 20 20:01:24 2025 GMT
Subject: CN=eed649f4ffac225cd8021c7837aeb9aff6985ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:9f:d1:90:8d:4e:66:71:df:22:6b:06:7a:
32:d2:f5:c2:90:60:1c:de:05:78:80:78:44:f9:f5:
41:32:1e:b1:3d:82:eb:8b:5c:4f:57:92:8a:fb:67:
04:7f:24:99:8e:19:ff:a1:bf:21:04:cc:a0:e1:3a:
18:f5:a0:88:78:9f:57:cb:ec:1d:86:e3:d8:a2:ae:
bf:0f:2b:46:46:88:54:47:35:0a:86:11:82:31:87:
cd:eb:c6:2a:2b:ee:12:36:4a:dc:13:61:08:8e:5d:
b6:47:c2:bc:5c:57:44:48:f2:5c:e5:fc:26:b7:ec:
20:3a:61:97:e1:d3:d1:4e:5f:ac:fd:f9:10:03:d1:
ae:e5:80:b0:b8:5d:ab:b4:cd:ef:b3:ae:93:57:07:
10:46:18:0a:62:94:62:05:7b:0a:c3:c2:a9:37:3d:
63:fe:90:c3:bb:f9:28:18:be:72:0b:ed:70:98:53:
c0:21:63:7d:33:2f:ae:a6:dc:ef:e1:3e:a7:67:0e:
89:6c:0a:cc:17:94:4d:26:a5:b0:42:e0:c6:12:87:
80:04:4d:dc:55:8e:43:e5:6f:d2:98:96:8f:a3:1c:
5e:2a:7c:19:15:00:3a:a9:65:6b:a3:98:ad:f6:db:
f0:01:2a:b4:0c:de:6a:aa:9c:a3:26:6b:0f:68:8b:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:49:F4:FF:AC:22:5C:D8:02:1C:78:37:AE:B9:AF:F6:98:5E:F9
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:37:9e:64:9b:ad:42:c9:d7:a0:32:b3:92:ee:9f:fb:2b:
3e:83:7a:6a:83:c8:1c:d0:e5:b0:7c:eb:26:2d:92:77:dc:9e:
c5:ca:c2:30:56:f0:3a:5a:c3:85:8f:b0:ba:ad:8c:95:2c:22:
78:7f:59:aa:63:a0:b7:ea:09:d9:0d:cc:3c:f5:53:f3:e2:c7:
67:11:32:42:6e:7e:f4:e5:a9:8d:9f:1d:ee:65:31:ce:c5:12:
f3:e9:30:ca:7f:00:65:45:7e:ca:33:a2:bf:19:18:95:72:28:
41:e2:8a:33:1a:98:a2:ba:0d:79:cd:2c:09:6b:ab:fb:89:75:
8d:a5:cc:1e:07:fb:1c:49:86:c8:88:85:3e:48:1d:71:78:81:
51:42:f1:22:37:84:a8:bc:fc:3d:10:b0:94:57:40:54:11:d9:
b2:22:8a:de:01:e4:99:aa:69:df:b3:5f:cf:b2:95:65:51:22:
e1:a8:ff:b5:d0:3c:0b:59:38:d8:56:71:cb:f2:d2:08:0d:72:
3e:9b:b6:22:3d:c1:a5:b6:ab:c6:f1:b4:58:78:72:3d:3d:53:
6b:a0:8b:6b:a6:d6:c5:87:4f:55:75:cc:44:c3:9c:dc:73:42:
8f:dc:93:f3:90:7e:20:2d:be:2e:7b:f2:48:3f:8d:08:4f:67:
e4:ba:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:40 2025 by rpki-client