Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier: YGDZTe7D/x1m2Hgo8CX8RqNvWFqmyf0hOLquAsHIBw4=
Subject key identifier: D8:42:16:62:AE:E4:67:AA:9E:E4:B8:B2:B8:95:E5:CB:E9:0E:25:E9
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 019A00A3396F558661B8BDBF317EB7CD4C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number: 0A3B
Signing time: Mon 20 Oct 2025 08:01:28 +0000
Manifest this update: Mon 20 Oct 2025 08:01:28 +0000
Manifest next update: Tue 21 Oct 2025 08:01:28 +0000
Files and hashes: 1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: uwo0FtBWq+8kZg9OOHsFGywTKOoSpDLSBnEyxd5NUe4=)
2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:39:6f:55:86:61:b8:bd:bf:31:7e:b7:cd:4c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Oct 20 08:01:28 2025 GMT
Not After : Oct 21 08:01:28 2025 GMT
Subject: CN=d8421662aee467aa9ee4b8b2b895e5cbe90e25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:f4:f4:2e:1f:bc:09:8d:02:9c:69:b9:58:
1c:dc:25:b9:7f:f7:70:0b:4d:8c:70:d2:af:2e:2d:
ce:06:04:9f:d6:d8:24:50:5a:c3:8f:1c:e2:c9:c2:
eb:95:2c:7c:dd:8e:ff:e0:b3:fa:a3:0e:61:3b:27:
04:78:c7:1d:17:19:73:20:19:f9:33:04:c9:df:2b:
f2:44:22:91:40:57:4b:85:80:5d:8e:6e:67:70:03:
ef:4b:6e:a8:61:60:bd:47:14:56:a6:9f:f4:2f:55:
87:45:0d:19:20:c4:c8:6c:74:5f:da:9f:34:df:ab:
52:1b:58:c1:aa:d8:fc:8c:71:be:86:ff:f4:66:19:
f2:73:0b:ad:cd:47:3c:6e:48:3a:2c:5f:54:4e:2c:
b2:14:62:9c:be:58:32:b2:7d:9c:e7:45:b3:6d:31:
b0:06:c8:cb:fb:1c:a9:00:3b:33:d7:a3:f2:bd:82:
ab:eb:84:1c:ed:73:6c:8a:cc:6e:61:15:e3:67:34:
5c:f3:c8:6d:70:04:71:66:e1:c5:a0:c7:18:02:3a:
4c:97:e7:33:b3:1e:76:e7:59:d2:9d:82:6e:65:88:
12:89:9f:5b:aa:7f:b9:21:b0:07:5a:46:e4:0c:83:
29:cb:39:77:65:da:d9:3b:c2:d7:91:67:ad:4f:da:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:16:62:AE:E4:67:AA:9E:E4:B8:B2:B8:95:E5:CB:E9:0E:25:E9
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:5b:5e:ce:a3:f8:0c:51:ea:48:10:e2:1f:62:4d:20:dd:
82:b1:d1:0b:d1:dd:37:87:61:f3:45:0e:49:1a:f1:40:b5:ac:
48:c8:27:7f:01:88:bd:d9:dc:36:c4:1e:0d:00:b9:c4:dc:36:
ef:59:bd:01:b1:89:2d:46:3f:92:eb:64:ce:de:f9:d1:a5:27:
11:4c:19:b0:a5:02:5a:13:97:00:ee:89:4e:06:96:96:69:51:
67:98:f6:bc:6e:89:9f:3b:36:ec:97:79:c7:53:2a:3a:cc:f7:
48:7c:a0:cf:66:cd:13:29:68:8c:3c:00:72:5a:62:bf:48:30:
7b:cf:82:06:22:9a:12:de:cc:46:f0:6c:2c:cf:15:bd:43:ca:
5a:ea:e0:46:05:98:1e:96:8d:ad:17:b6:65:42:53:62:cf:83:
19:1a:75:de:00:e5:23:66:6a:81:1d:67:e0:56:bb:a2:01:ec:
82:4b:cd:48:f5:38:9f:3b:67:ce:9e:d7:da:ba:fa:66:10:ab:
24:0c:8a:43:dd:78:52:3b:f5:a4:d2:25:ea:fc:8b:a8:7f:20:
31:1c:95:51:34:c6:d8:b0:a6:ce:84:de:26:ba:f9:70:bc:48:
ef:4c:49:3a:92:98:cc:59:2d:ee:5c:61:c3:8b:a8:92:e7:27:
e8:b3:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:27 2025 by rpki-client