Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: wvyuH243EHSL/mQK/HGX8gZGbLmlJhyo5sabwv85m1g=
Subject key identifier: 01:C5:6F:6D:22:88:0C:0E:EA:5F:93:FA:82:41:6D:AD:9A:A0:AB:AE
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0199FD34475036301BA945CE11279C9F39BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0B6D
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 2iAFavjJM9J4iHJpc4/YcsEdYX5jlXejLNXfNvsebBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:47:50:36:30:1b:a9:45:ce:11:27:9c:9f:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=01c56f6d22880c0eea5f93fa82416dad9aa0abae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:b1:19:f8:34:d3:09:0e:35:82:b7:ac:49:
49:ab:54:c5:25:c2:b1:11:34:e5:ed:a4:7d:da:5e:
6d:49:b5:59:b9:94:f7:9b:5e:d0:32:0e:86:92:c2:
3a:53:ba:e4:0a:b6:2c:c9:13:86:40:f3:e1:b8:09:
6b:af:cd:ff:55:52:25:d2:97:08:c8:0f:ef:2d:36:
5d:88:97:ee:c2:6a:60:39:85:d9:4d:9d:85:bc:86:
60:bb:89:e0:bf:67:e9:c0:24:5d:a9:a9:e2:4e:5b:
49:16:7c:e2:96:e7:b6:fb:b3:7b:32:8a:d7:05:35:
e7:40:72:ea:4a:85:05:b5:ad:cc:92:84:50:e8:dd:
13:a0:a5:49:37:ed:2b:8d:45:9b:a9:03:8e:e5:a9:
50:53:54:5f:d4:30:64:92:33:00:ba:b3:e2:76:6b:
d2:82:82:1d:0d:99:96:d9:3b:c4:9d:c1:8a:92:49:
1c:87:fa:52:a7:13:81:20:cb:d7:de:68:b6:20:9b:
8b:9c:8f:91:c4:a9:fe:b2:bd:17:b1:de:fa:92:a4:
aa:b3:e7:32:90:3d:27:c4:62:78:63:23:a8:ef:1b:
ad:6f:2e:1a:6e:c7:c8:df:ee:e1:4f:80:4d:53:1f:
28:cb:20:01:1f:00:62:65:17:1e:57:2a:3d:19:49:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:6F:6D:22:88:0C:0E:EA:5F:93:FA:82:41:6D:AD:9A:A0:AB:AE
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:04:2b:e6:9a:ef:24:67:ad:8a:fc:41:0d:ef:07:c6:83:e6:
e5:ea:7d:f5:d0:ad:ab:25:b5:74:1a:76:89:de:75:63:8c:57:
fb:ce:a8:1d:7c:e5:e4:cc:0d:fa:c8:b4:a9:ca:bb:10:2f:e7:
71:ab:22:fc:55:d2:c2:36:4a:8f:6c:b5:50:b3:5a:b1:cd:e4:
3f:aa:6e:c5:b3:a2:ba:c1:fc:c6:3e:b8:d4:f3:99:ca:1f:22:
4a:f9:ab:3f:1a:0b:56:1c:2a:b4:94:27:7f:b8:a0:93:9a:03:
d8:84:19:6f:2c:1c:21:60:9d:89:6b:5c:34:a3:7d:11:f3:6f:
87:5f:5a:6d:4d:69:57:67:84:2a:e4:a3:7f:16:38:c8:65:a7:
37:ed:2c:de:30:46:1b:10:1e:e3:4f:5a:5a:92:20:2c:d7:8b:
e8:77:74:1d:0f:c2:75:c9:9f:49:6d:99:b7:5f:90:15:b9:9c:
95:97:69:32:a5:c8:9e:bc:ec:4e:2f:83:1e:f0:be:7f:cc:6e:
76:89:cf:6b:ea:f5:46:ea:4b:23:7c:1f:01:98:7c:98:61:53:
b0:04:45:c3:a6:e9:46:c3:22:2f:65:67:83:ea:76:7e:a3:f6:
4b:76:ad:d0:76:5a:0f:7e:46:43:e3:fe:c0:82:9a:fe:cc:d8:
46:51:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:51 2025 by rpki-client