Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: Yp7UNQ+C4b4GZnTqz1azWKRthR+H0CcYlfXKJja2+9g=
Subject key identifier: C6:FE:21:F9:06:D0:CD:1B:21:CC:7F:79:15:EF:BE:79:8D:DE:3F:A6
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 0199FB7D1713ED1C1B2AD4A80EF46A36FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 0875
Signing time: Sun 19 Oct 2025 08:01:43 +0000
Manifest this update: Sun 19 Oct 2025 08:01:43 +0000
Manifest next update: Mon 20 Oct 2025 08:01:43 +0000
Files and hashes: 1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=)
2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: /q2xrNCwDJg5a6/JjTZS+xFwNP+/odp7Z4ScmE8aXGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:17:13:ed:1c:1b:2a:d4:a8:0e:f4:6a:36:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Oct 19 08:01:43 2025 GMT
Not After : Oct 20 08:01:43 2025 GMT
Subject: CN=c6fe21f906d0cd1b21cc7f7915efbe798dde3fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:86:25:5e:7d:80:2f:55:ed:76:6b:62:8b:
8f:39:b0:b1:42:ff:04:bd:0a:b7:42:73:66:bc:26:
af:2f:ed:1b:f2:d7:14:44:65:b7:ab:ab:df:0c:7c:
dd:0f:26:14:c7:6b:85:a9:16:36:70:ea:2c:38:78:
ad:2f:0d:3d:b2:eb:68:3a:bd:89:6e:cc:16:ec:7c:
f5:c6:67:d2:ba:c8:e0:5f:30:a1:7d:08:76:03:d7:
86:a2:66:82:e3:86:5a:bc:8d:8a:28:71:32:d5:60:
19:3f:64:5f:af:9a:4f:33:f1:e3:f8:33:0f:d7:5e:
64:08:04:77:e2:2a:0b:40:50:71:4a:44:cb:bc:96:
08:6a:d5:0d:20:e3:fc:76:1c:b7:8f:f9:ea:79:75:
c5:7f:85:47:bb:32:a7:0a:8d:d2:a2:e1:c2:01:6e:
28:aa:19:25:bd:ad:9e:4f:9a:81:4b:35:1e:22:6f:
fb:03:74:53:be:2e:81:41:25:b6:ab:ee:02:d5:c9:
12:ff:70:79:36:6f:83:84:f7:aa:f5:3e:2c:3c:9e:
59:9c:d0:3a:6f:ce:ff:a5:44:fd:b0:b2:61:98:8b:
d3:1f:ba:24:52:5a:8e:d1:3f:de:ad:40:20:e5:ac:
ac:cb:8e:5a:8f:ab:09:15:7b:73:81:58:1e:5e:da:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:21:F9:06:D0:CD:1B:21:CC:7F:79:15:EF:BE:79:8D:DE:3F:A6
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:32:b0:79:ca:66:c3:df:6f:9e:f9:11:d4:5d:fc:79:5f:94:
05:67:48:8e:c8:8b:83:9f:10:d9:22:06:29:bd:1f:2c:b8:db:
13:bb:10:8a:3d:44:94:b6:45:69:ce:f2:8b:ee:1d:e8:eb:ad:
47:b5:c7:18:43:ad:b0:59:75:be:9a:36:40:7b:a0:49:d8:7b:
25:99:a2:ed:20:82:90:ea:30:48:f8:e5:96:fd:f7:c4:49:82:
ab:76:a3:3b:d7:39:01:80:1a:37:65:3a:ca:4c:cf:d1:59:ea:
82:70:52:44:a7:84:0b:6c:72:cf:23:bd:75:72:00:f5:86:49:
3a:53:2d:e7:c8:08:0d:ba:45:cb:2b:f5:74:98:f7:e7:65:ee:
f6:42:07:6c:aa:46:e4:7c:f8:ce:0c:9a:38:c8:66:f8:5f:12:
09:c8:03:3b:fc:b8:d8:38:bf:30:6d:b3:9c:76:5c:7d:30:f9:
22:33:61:ec:30:5c:ac:7e:3a:71:60:c7:68:45:77:16:6f:fc:
1d:61:d0:af:97:6b:1a:38:39:f7:45:e6:ad:41:19:ab:88:a9:
6a:45:f4:f5:64:9b:3d:ab:fd:92:42:00:89:d0:f4:0b:f3:ae:
6f:4a:fb:10:85:b6:c6:50:6b:42:cc:85:96:7d:b8:90:4a:a5:
2c:c9:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:17 2025 by rpki-client