Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: 5A185MRsWMPlshOWm/PTOt9uUXzJ0iXV2dHTuexISRo=
Subject key identifier: 0D:9F:9A:CB:A4:23:6F:45:A3:7B:C8:99:75:7D:22:E7:95:DD:36:5C
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 0199FF59504813D66578BB10FE9272DD7186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 0396
Signing time: Mon 20 Oct 2025 02:01:07 +0000
Manifest this update: Mon 20 Oct 2025 02:01:07 +0000
Manifest next update: Tue 21 Oct 2025 02:01:07 +0000
Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: QSflqy24VxQeN3Fhawu8ruI0/oASaKR/CVOQy/K1gzI=)
3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:50:48:13:d6:65:78:bb:10:fe:92:72:dd:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Oct 20 02:01:07 2025 GMT
Not After : Oct 21 02:01:07 2025 GMT
Subject: CN=0d9f9acba4236f45a37bc899757d22e795dd365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:5f:f2:4e:ae:fb:b6:f0:26:b6:63:3e:20:
61:2b:ac:4a:c9:df:fa:52:53:3b:fa:37:d8:7c:ec:
e0:e8:fe:61:5d:32:eb:05:60:52:09:10:2f:69:fc:
f7:d8:0d:00:60:5d:9a:c9:79:17:66:65:6a:4c:53:
64:82:a1:f0:61:6a:33:94:6d:64:2d:4f:af:ff:4c:
ae:d5:dc:ac:bf:55:c7:63:b1:96:9f:87:ff:aa:eb:
21:18:72:50:ce:30:53:0c:73:0c:b5:78:02:44:cf:
c8:d9:3d:8f:0e:ae:05:77:5a:ff:b5:41:ec:46:60:
53:f0:32:fd:85:28:e7:f6:32:98:95:82:3b:54:99:
48:47:ca:bd:43:ab:79:10:82:6e:48:f8:8d:5c:80:
ef:da:cb:7c:d4:af:d9:91:8d:5e:0b:c0:53:07:8f:
5a:e3:b5:80:f6:b9:5e:eb:a5:be:b0:37:7e:b7:4d:
e3:89:4a:14:0b:30:ea:30:24:96:09:09:82:d7:36:
ad:a6:2e:f6:25:63:7e:96:cb:f1:01:56:c6:1e:b2:
d2:5a:7e:4d:2b:b4:8e:67:ac:7c:57:f6:e4:25:f6:
57:6c:fe:a8:c1:33:2a:e7:f7:a4:58:42:e1:cc:a7:
9f:0e:4f:f4:99:50:e1:8a:22:70:53:97:f1:e8:d7:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:9A:CB:A4:23:6F:45:A3:7B:C8:99:75:7D:22:E7:95:DD:36:5C
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:86:c8:ee:6f:42:22:ca:93:0d:71:53:69:06:37:3e:65:89:
18:10:5e:17:5a:a6:d0:dc:b4:b8:d5:6c:e6:fa:40:3d:ee:75:
1d:dd:bd:f2:3e:b1:ae:a6:c5:b6:c5:15:72:e5:28:7a:eb:e3:
af:c2:5c:f2:91:7a:f1:a2:f4:40:b5:ac:2e:b5:a2:3d:c5:38:
bc:f7:66:d3:71:9f:fc:b5:4b:7c:e8:83:2e:b1:02:8a:18:ac:
8f:b5:01:a7:95:7a:24:d3:36:79:0d:82:b0:b0:ee:59:83:fe:
37:0a:a4:1e:12:25:fb:9f:28:be:f6:a1:20:0f:00:73:a9:92:
96:3a:1e:0e:51:00:69:34:a6:11:e1:f7:94:d4:98:35:94:8e:
d8:e1:20:1e:3c:54:57:a1:9a:05:c3:31:29:79:91:6c:d4:54:
65:b0:4c:73:fa:8b:60:91:0f:b3:4a:2d:1c:62:77:fa:7b:e8:
a7:44:66:5f:dd:08:29:ef:11:af:f2:6f:f4:a1:a4:cc:93:48:
d4:e5:6b:5b:1e:82:5e:ac:f6:ba:a3:d4:72:e9:d4:77:c8:8c:
6a:4f:01:4f:0d:7b:60:52:c8:bb:b1:e6:63:05:8b:2c:72:1e:
30:79:9c:24:0a:3e:d5:36:aa:53:c4:bf:ca:f5:1b:a5:48:ea:
07:16:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:23 2025 by rpki-client