Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: o/IkY9QNKTsdH5ElxqZ7xGiqLNISHZE6q1tIBPWlU4Y=
Subject key identifier: DB:1B:FB:92:08:BA:5A:15:50:5B:6B:53:C7:DA:93:CC:7D:0F:52:10
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 0199FBEBAEF9458C48E5EA54978AD718A3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: tqU4gVjvDi9VcXzavc0CsgJ80eiLqN4qjMU5oyStApI=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:f9:45:8c:48:e5:ea:54:97:8a:d7:18:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=db1bfb9208ba5a15505b6b53c7da93cc7d0f5210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:f5:fc:01:53:b4:83:94:9d:f9:74:e7:6a:
7a:9f:20:a9:b9:bf:3d:50:02:ee:8d:ef:61:2a:a7:
55:e4:5f:d4:1c:14:c7:78:68:06:58:a6:7f:d2:8d:
18:96:56:a7:68:e4:a7:a7:06:b6:d6:ac:b5:0d:22:
3b:d5:93:e2:41:58:a1:0c:a0:41:7d:01:1a:9b:42:
59:4b:63:5a:51:45:7b:c7:71:e0:fc:91:a0:b9:26:
ff:60:b3:85:96:d4:da:c9:40:75:5f:c5:3b:66:e0:
4b:f1:6f:19:47:b4:fe:34:40:ae:99:dc:dc:80:dc:
0c:48:64:15:0e:bf:43:1d:b2:52:16:a9:58:f3:fd:
19:18:c6:b6:02:1d:b1:9d:7f:60:6d:75:8f:0e:71:
d2:dd:90:9d:8d:f0:76:9c:54:6b:88:8a:10:54:2f:
f9:f5:d4:9f:84:5d:d6:d7:81:7b:9d:43:22:b4:ae:
a8:14:c8:4f:64:1e:10:4a:c9:4e:4f:64:f3:75:23:
7c:11:66:da:f7:db:e0:14:f4:1b:06:c0:6a:32:3c:
34:e5:be:67:df:4a:78:06:d0:0c:01:a3:72:b3:fa:
96:50:31:d2:e0:13:f7:6a:ae:3c:f9:53:e4:37:20:
09:f1:de:75:3e:3c:1e:02:3c:15:43:d7:99:65:a3:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:FB:92:08:BA:5A:15:50:5B:6B:53:C7:DA:93:CC:7D:0F:52:10
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:72:c6:5e:3e:c8:c4:12:8a:06:de:cf:a3:a4:3d:ce:13:5f:
86:71:e7:07:0b:a9:4d:65:63:97:90:ac:3d:e7:de:a7:9a:28:
03:2e:ee:dc:17:c6:aa:79:16:11:e0:d1:8a:b1:af:a6:ac:d5:
f1:9d:ad:35:40:db:f6:7a:16:c8:1a:35:9d:12:65:06:07:79:
08:49:0b:b1:72:58:e0:c8:02:c9:b4:fa:68:c2:eb:51:02:73:
85:10:3a:3d:b9:0b:7d:69:1d:f1:23:0a:13:ed:2d:b9:32:a9:
99:8a:db:c8:61:ff:ad:eb:c1:50:49:39:d5:de:85:43:be:04:
ff:8f:ce:17:0b:84:57:f4:96:03:a6:b8:5b:6f:e6:a9:55:17:
7b:62:88:d0:a0:9f:5a:2e:82:0d:1a:f3:c9:92:ec:c8:2d:e5:
c0:ad:62:de:1d:09:b1:f2:0c:35:1e:c5:7b:ae:7b:44:a9:36:
30:39:3d:5a:42:39:85:d8:c8:94:b5:84:07:44:95:dc:fc:f4:
7e:03:ae:e9:73:15:8c:da:e6:48:0f:89:c4:25:6f:dd:a2:67:
ed:03:da:a6:a0:b5:d7:ec:9f:63:dd:e4:79:cb:0a:bb:52:9c:
51:db:3a:0a:3c:d5:d2:f4:18:24:4a:68:1b:07:c1:da:1b:e2:
54:1c:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:08 2025 by rpki-client