Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: R+SqixFrc1q3b57XfvQnbO2GUNk+dXpKG+tsBow5Jfw=
Subject key identifier: B2:33:63:0C:3D:7A:F8:9E:A5:8A:55:1C:10:7A:8C:05:CD:C2:7B:5A
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 0199FF227F106B8C311BF9DA2C357D776005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 0C97
Signing time: Mon 20 Oct 2025 01:01:14 +0000
Manifest this update: Mon 20 Oct 2025 01:01:14 +0000
Manifest next update: Tue 21 Oct 2025 01:01:14 +0000
Files and hashes: 1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: 2BssQmD/w9ld4h4yoPgaxNBjJ4QE7c6RmBaQ4DSh8fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:7f:10:6b:8c:31:1b:f9:da:2c:35:7d:77:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Oct 20 01:01:14 2025 GMT
Not After : Oct 21 01:01:14 2025 GMT
Subject: CN=b233630c3d7af89ea58a551c107a8c05cdc27b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:a2:52:d4:d8:44:f8:61:77:c1:e3:a8:8f:
48:d1:f1:46:80:4c:25:84:bb:26:ea:a9:33:e0:e1:
6c:a6:a8:fe:22:19:42:a3:0f:98:a9:d1:fd:6d:63:
66:f0:4a:20:5a:bf:31:8d:83:02:3a:51:60:33:eb:
30:ea:47:7e:dc:53:b5:0b:5b:9e:ce:5d:d7:b6:76:
9e:08:ad:1c:96:46:c0:a2:42:4d:67:36:bf:64:f6:
57:06:31:0c:b9:e2:1e:f7:20:ff:dd:56:07:87:8d:
33:58:38:31:ee:a5:70:e9:9b:51:4c:28:46:04:1a:
43:4b:5a:9c:04:e0:9a:21:72:54:bc:84:53:c7:01:
07:56:1c:dd:61:38:8a:ab:c6:72:38:7e:fc:83:41:
42:d9:55:f1:29:00:79:45:51:78:57:91:a8:75:f7:
34:c9:d2:86:1b:5a:60:1c:b4:36:ac:d4:80:e2:ae:
76:01:70:70:41:17:6a:96:e7:1d:41:0f:13:d5:05:
ca:74:96:2b:b4:1a:44:85:98:52:61:f0:5c:a0:35:
48:b7:5f:4d:ed:7a:16:55:04:44:d1:7c:c2:b2:27:
a0:1d:15:f8:7e:55:39:ed:a5:49:19:81:95:5d:aa:
37:83:78:4c:d9:9d:d2:e0:bd:15:47:6b:aa:90:4a:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:63:0C:3D:7A:F8:9E:A5:8A:55:1C:10:7A:8C:05:CD:C2:7B:5A
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:cc:33:a8:2e:f4:b6:2c:cc:24:ce:e7:3b:53:cf:18:72:
12:8f:ff:10:1e:03:cb:3d:58:3d:48:b9:fc:ff:1d:bd:0d:5c:
62:25:c9:c2:7c:80:f0:88:80:d6:83:d1:19:9b:87:90:88:0e:
76:b1:cf:6c:41:f7:4d:fe:96:be:a9:79:be:a5:66:55:e7:4d:
d1:4c:fa:fc:db:20:f9:6d:8a:f3:82:23:20:a5:3a:03:1b:3b:
96:ce:82:b2:92:e4:d7:be:c0:35:b0:64:54:d9:54:6b:ef:a7:
f9:ce:f1:26:66:1f:c0:8a:17:10:4f:68:87:1e:5f:78:63:33:
94:66:af:01:71:39:89:2d:66:d4:40:d1:da:f3:f9:fc:f6:a0:
5c:7d:38:52:e2:5e:d4:97:58:fd:e1:9b:ed:75:e9:65:e7:f8:
79:b2:50:a2:a0:74:13:d7:af:79:48:85:06:ce:24:f4:2f:e0:
2c:39:b7:fa:16:99:d3:61:10:39:9e:ca:c1:81:85:48:97:53:
26:6e:14:2b:d0:e9:68:3b:5c:cd:5a:ee:08:cf:d2:7f:e5:d4:
a7:d6:1d:f2:f2:85:b1:0a:eb:4b:a9:cf:a6:1b:6c:21:bf:d2:
de:5f:3e:69:9f:8e:a5:7a:10:bf:39:9c:cd:81:e6:1a:0e:4f:
1c:d8:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:35 2025 by rpki-client