Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: +F7/2mZUbIfcR7JjyDYLbbU28lbFYgNmN6H6hu2JQ3Q=
Subject key identifier: CD:D5:E9:5D:2A:31:DE:07:CB:AF:23:06:25:48:87:61:7C:65:41:35
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 0199FD340A4797DD35DF6C2712F2651D830F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0DF6
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: Da1YSBEUD3KGJnkx0u9SbRJooCpofZA4gdX7eniBibY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0a:47:97:dd:35:df:6c:27:12:f2:65:1d:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=cdd5e95d2a31de07cbaf2306254887617c654135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:98:d5:bd:c8:5a:f4:a7:a8:f3:66:d0:0e:
12:f1:d2:4b:a6:e4:05:53:6e:df:6c:b3:b1:13:7c:
0e:7b:32:fe:7c:0e:2f:09:8b:2b:7e:b5:1b:70:a1:
ee:8f:06:c8:4b:09:31:9f:47:a5:c8:71:06:b2:ea:
19:8f:3e:c3:cd:ef:6b:15:f6:be:34:d5:7a:9a:25:
f6:50:d2:f4:f9:ae:72:4d:44:c9:b1:ee:23:ec:74:
08:eb:72:60:79:90:62:71:42:f2:13:1c:12:be:47:
3e:c4:ad:e2:a0:3e:45:37:82:b7:b0:28:52:f5:30:
08:e6:41:fd:9f:4a:01:c7:54:f3:a2:06:4b:f7:60:
95:ea:07:6a:2d:51:01:fe:b9:8d:dd:0b:a2:17:7e:
fe:15:6e:19:19:23:bb:a4:07:38:19:78:ad:05:f1:
e6:e0:ac:34:2b:96:f1:01:6f:b0:a4:b9:7f:34:c9:
52:1d:13:05:a6:67:0f:8e:80:44:e0:dd:90:c5:8b:
5a:7c:5a:51:29:c7:55:2c:e5:13:d6:40:53:b8:d6:
27:47:ad:54:4b:4a:79:4d:ac:a4:df:a6:41:2b:56:
c9:7d:33:61:63:15:4b:e4:8a:1a:9f:82:f1:1a:4e:
5a:cc:ba:f8:84:fb:d9:ce:35:1c:68:d4:83:14:c6:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:E9:5D:2A:31:DE:07:CB:AF:23:06:25:48:87:61:7C:65:41:35
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:b8:03:73:45:ec:16:e5:7f:99:5e:7c:54:90:44:9b:ef:
47:ac:20:d2:f4:62:59:fb:67:a8:26:bc:e1:3f:0f:c1:41:86:
c3:35:30:6b:2a:3f:80:fc:49:c9:bd:65:70:d1:7f:1f:0f:d7:
a0:f9:db:91:9a:c8:aa:3f:9c:bd:6e:86:ed:26:13:cb:bb:62:
53:b8:42:80:fa:21:aa:d6:73:3d:f3:0d:75:ab:e7:8f:61:d3:
91:af:39:cd:70:05:a7:94:6f:44:ef:c4:07:fd:28:e8:84:35:
1d:e7:c6:a1:ee:d3:5a:69:be:4e:17:29:2c:fd:9b:a3:b9:8a:
20:ee:2f:e2:38:d4:d3:7d:cf:ab:5e:53:5f:f0:46:b3:cd:47:
db:7f:b2:4e:2a:1a:cb:b4:19:63:c0:76:6e:2c:b6:77:ce:30:
75:fb:09:a5:91:31:05:ec:4a:ce:09:d1:04:39:81:86:33:d8:
27:92:4c:a8:0c:d4:35:40:b3:eb:a7:12:4a:5b:63:6e:44:3d:
c5:59:89:63:1a:8d:99:d5:40:ad:a4:7c:bc:8e:22:54:3a:19:
2c:2f:90:1f:12:b4:62:c7:ed:19:1b:6c:82:4f:f6:7b:71:9b:
bb:29:f5:3b:84:43:9f:f9:a3:71:82:08:e8:6b:cc:3d:f0:9e:
60:c3:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client