Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: mdN+Fjx/fBtBDpvrjoFAOiKIkMfRJri8Mw83eDpj+4k=
Subject key identifier: CA:5A:55:16:17:45:93:98:C5:6B:C8:4C:7A:3C:C8:0E:55:57:A9:A6
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 0199FC58E214266180789A5E7CAF9ED99B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 1155
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: l6PGq4edVVkMTBIfUO59rA0AP8jm7gZSnDDIe0txaLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e2:14:26:61:80:78:9a:5e:7c:af:9e:d9:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=ca5a551617459398c56bc84c7a3cc80e5557a9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:e7:86:67:0c:c3:38:d5:8b:da:ab:85:41:
f1:45:ec:02:20:a6:47:4f:a9:49:b0:8e:9a:4a:e8:
63:4c:6f:d2:df:fd:58:90:b2:d2:48:d6:56:37:18:
a7:eb:a8:60:1a:17:7f:7e:9b:77:65:1f:ee:9b:72:
70:e4:2f:84:01:95:1c:54:f9:c3:03:2d:2a:41:10:
fe:4d:7f:96:2d:e8:5b:be:7b:bf:27:af:1e:e7:a9:
bb:79:30:06:a9:0f:59:46:9a:d9:fb:4b:ed:90:ab:
1c:c8:ef:b6:73:83:5d:4b:07:97:2e:01:03:8d:fe:
56:d3:8a:e1:47:95:7e:3a:f1:58:0e:e1:7c:a0:e2:
f1:64:b7:7f:a3:01:3f:66:5e:0b:10:99:d5:31:b0:
12:e5:1c:3b:c5:93:5e:47:e2:9c:9d:93:49:4d:22:
78:f2:c9:73:07:23:da:42:3a:5e:67:3a:9a:e4:42:
dc:5c:cd:3a:ef:06:e3:e6:7a:8b:91:f4:9f:49:1c:
63:4e:08:8f:e0:db:10:fc:e4:c3:fa:bd:54:bb:9d:
76:b2:94:aa:f2:28:53:b9:ed:f8:1b:75:9c:97:a4:
b7:fb:97:8a:3f:2b:ff:3c:f6:dd:ac:70:37:e0:b7:
45:1e:7e:e4:8c:49:29:95:ae:f8:fd:2f:90:54:61:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:55:16:17:45:93:98:C5:6B:C8:4C:7A:3C:C8:0E:55:57:A9:A6
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:1a:fb:00:0a:5e:23:83:83:37:e5:e3:d8:0c:92:b7:17:
5e:73:fb:ca:91:97:7b:65:33:d7:0b:1e:24:51:68:8b:f4:c9:
29:08:96:9d:5a:b9:27:43:d1:df:66:42:3c:04:62:59:54:9b:
0f:82:c4:32:66:e5:8e:3c:7b:75:f3:06:97:4e:d6:2d:dc:08:
2b:84:84:b8:bf:93:c6:d0:37:f4:d6:98:8a:f3:ed:5f:57:4f:
b7:b2:71:41:d6:1d:05:7b:a3:8c:93:e1:f9:c8:d6:e1:d7:65:
cf:b8:cb:9c:54:53:6b:70:d6:3c:ca:47:f0:cc:db:12:84:db:
a6:74:29:bd:0b:2e:0b:4f:cd:c5:6b:b1:5f:98:f1:2b:33:9b:
43:a1:5f:70:6d:18:00:49:9b:ed:45:74:53:00:ad:9b:d6:b6:
09:4f:56:79:a1:db:e6:dd:46:c5:f8:8f:a7:d1:64:3c:51:a7:
f2:90:2e:ca:98:19:3c:96:df:cc:b4:ce:a0:81:7a:6c:f7:3c:
0c:1d:15:a8:24:e5:cc:b6:17:81:48:6d:b5:06:d4:ac:55:6b:
b4:17:d9:2e:77:ff:d6:a7:7e:d3:d8:a2:99:5c:36:9e:1f:71:
d5:e6:f2:e2:35:4e:29:c2:b5:a0:90:35:c0:3f:4e:b1:7a:56:
e1:d6:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:30 2025 by rpki-client