Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: xvzrejAtGOhSWXrqeA1x9AlEm227A6E5SyBU8SthP4s=
Subject key identifier: 35:0B:39:C5:15:62:92:B6:86:3C:0D:49:63:B6:14:54:52:36:C1:54
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 0199FC8F1D2E2578D96C65EA4D06F940F9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: HZSPzWfJrlCT6sd235S3eBEuU2VjccJ/wcTQOr4WLak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1d:2e:25:78:d9:6c:65:ea:4d:06:f9:40:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=350b39c5156292b6863c0d4963b614545236c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:73:59:df:1b:ee:07:49:2d:2f:52:70:4b:
b7:b8:9c:21:ec:7e:84:b3:d8:25:30:8c:71:20:fa:
ab:74:dd:88:73:5c:13:93:c5:54:25:31:fd:ad:9b:
ba:de:e2:18:e2:a9:c7:a7:66:57:1f:31:fd:3d:37:
b3:a1:78:06:51:72:f7:6e:f0:5c:81:e8:ea:b0:9d:
d3:bd:62:7f:fa:ca:ab:5c:57:9b:18:3c:33:b6:b2:
4f:25:9a:31:7c:e4:3e:54:f9:55:b4:5b:0e:91:55:
f9:a6:eb:8c:06:7f:c3:7b:ef:13:0d:86:f6:99:ad:
af:ab:09:b0:a4:12:58:4a:8f:a9:f5:f8:12:42:8f:
e2:52:b7:71:16:8e:a0:65:82:65:08:3d:d9:1e:3b:
6d:15:2a:c9:5c:f6:64:71:2a:4d:ec:81:4e:e0:fa:
e0:46:18:cd:70:4f:b7:78:80:0b:ec:97:2e:36:1e:
4e:3b:83:39:cb:fb:3d:7c:27:2e:6f:c1:99:79:88:
57:fc:85:21:7e:cb:0c:a6:da:e4:34:d0:91:c9:21:
a6:95:19:4c:53:eb:fe:9c:b6:76:23:f6:05:6c:b6:
b2:fd:02:8e:1a:3c:72:75:7b:a1:da:0a:06:c0:36:
a8:64:e6:d9:ba:41:f3:3a:76:ec:a8:11:e6:de:af:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:39:C5:15:62:92:B6:86:3C:0D:49:63:B6:14:54:52:36:C1:54
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:e3:dc:06:d4:a5:6b:a3:93:ad:e2:26:fc:ab:e4:ae:11:
72:05:31:5d:7a:ab:0d:d9:6f:bd:d5:25:31:7e:d2:ea:14:5c:
22:9e:9c:1a:ec:f5:44:24:68:a5:7a:50:3f:97:2b:61:ec:7f:
58:70:ce:aa:4f:a8:3d:6d:70:2c:5a:c1:d5:45:f4:13:51:c2:
ae:ce:f4:6d:e9:b1:5c:c0:ea:f4:58:b0:eb:0c:93:4a:43:c8:
0a:0d:63:cf:38:03:32:77:df:f6:2f:f4:3d:b8:da:97:eb:4e:
ee:74:74:61:4c:b2:63:16:59:02:c4:a6:23:c5:03:1f:31:4d:
51:e4:dc:c2:58:b1:dc:3e:a5:65:3b:4c:f9:cf:b0:67:fc:b5:
60:29:da:f4:20:fb:78:25:e0:a2:d3:ff:c3:4b:0e:25:3a:43:
10:15:0e:e5:9d:c2:36:8d:1d:a0:0e:35:05:7e:b7:ec:ba:4b:
8d:a6:73:ca:57:8d:d7:31:f0:a8:f5:60:31:9d:6f:37:a5:f2:
2d:ed:d0:76:e2:ff:9e:a3:37:97:b5:21:2a:a7:9a:7b:3a:34:
0b:5a:7a:5e:3e:68:c9:96:4b:5e:29:9b:33:09:f4:cc:3e:f6:
78:60:13:f7:06:98:f6:b1:a1:76:44:5d:63:60:5b:b3:1c:82:
aa:2c:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:27 2025 by rpki-client