Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: cWIJyFKN6LNf230Lcho5m7S+YJiVGEL+Qe+GYFpLk6c=
Subject key identifier: 62:F9:9A:10:31:83:86:37:96:B4:C0:6E:A7:18:90:F4:80:89:A3:5E
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 0199FC586AE887859FA24B7ED5D27D99E28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: v95fwtf9nA1515oR4DHNC64omTANSRylAT9l3A2yOs0=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:e8:87:85:9f:a2:4b:7e:d5:d2:7d:99:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=62f99a103183863796b4c06ea71890f48089a35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:bd:53:3e:3c:94:6c:0a:df:f5:0c:ca:65:
72:67:b9:79:7d:3a:4d:4e:44:59:3d:a3:12:18:b5:
87:86:03:33:fc:6e:c7:bb:98:3a:6f:e8:02:34:2e:
ee:e3:c6:53:76:f5:01:f1:9f:ba:8e:ff:17:08:ea:
98:08:be:92:e5:74:09:30:ee:72:c0:fe:ce:12:5a:
30:50:92:64:83:b1:a7:75:16:a5:37:33:5c:db:f7:
cc:53:51:1f:77:ca:75:84:3b:72:5a:d1:4a:21:2e:
f9:39:49:33:57:c2:45:4d:c0:e0:a8:e1:bd:d3:ec:
27:03:f8:f8:44:37:ee:1a:9c:f3:18:55:28:57:95:
78:2d:ff:c3:70:98:34:cd:05:66:87:62:ae:85:2e:
0e:cc:ea:99:22:e8:14:6c:e2:1e:16:61:1d:1a:5e:
1b:f5:a5:cf:4e:ef:9c:62:56:82:e9:6a:7e:39:37:
a7:45:14:4e:68:80:2a:13:0d:23:c3:68:32:57:9b:
55:1b:25:c4:3f:54:81:93:3a:80:00:37:39:61:5b:
ff:84:57:91:c5:0a:a3:9b:8c:80:e1:79:24:c2:0d:
56:da:d3:4e:9c:e6:67:69:14:b3:16:b3:da:60:9d:
7e:b2:02:66:0e:25:f2:34:bc:56:ed:8e:6a:cc:48:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:9A:10:31:83:86:37:96:B4:C0:6E:A7:18:90:F4:80:89:A3:5E
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c5:2c:e6:e3:f7:eb:a8:c7:f3:85:3c:61:44:32:61:d9:d6:
d3:45:06:04:36:79:7e:46:fc:77:e7:b9:f2:18:34:42:cd:7e:
6a:1c:01:58:ed:be:47:5d:d8:35:e2:e9:28:02:c3:ac:3a:b3:
dd:bd:11:75:65:3e:6e:28:44:a8:37:80:88:20:fc:31:59:7d:
51:7a:4c:8a:39:7a:0d:31:f0:f1:48:28:da:23:bf:57:0b:3e:
ff:9b:b6:3d:9e:a3:6e:b6:01:0a:e3:fd:18:da:1f:ba:bb:25:
0f:93:85:fa:ca:a6:30:38:55:50:f9:a8:cb:b3:30:94:b6:be:
4b:91:41:7e:b9:c3:5f:d2:64:e5:81:82:be:f1:db:b6:73:ff:
e6:28:3e:f1:e7:61:4a:04:20:f0:54:99:06:3c:35:0d:91:4c:
8e:cc:dd:20:ba:3a:cf:d4:ba:40:c1:62:b4:07:f9:7c:5f:40:
c0:d9:fd:e9:06:6b:04:e0:66:b9:7c:4a:8e:fe:b2:bb:fb:55:
fd:ac:50:c3:83:3a:f6:13:71:a0:a8:8b:21:71:97:ae:50:e7:
98:81:39:a1:69:ca:10:94:e1:e5:c5:6c:b3:df:0c:42:11:3b:
22:a8:f6:ce:a7:5a:bf:ed:de:68:6f:10:4c:d7:00:71:89:8d:
c9:d8:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:01 2025 by rpki-client