Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: DA+QHp4k4+VW1tsd1ZeNONBWzzJbw9jGqsc3j9i65lw=
Subject key identifier: 97:CB:94:B0:53:88:46:7B:53:39:12:4A:A2:8F:A5:C2:0F:66:F2:1B
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019A011158F8CB6427FD81496724EFA02DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 01EB
Signing time: Mon 20 Oct 2025 10:01:45 +0000
Manifest this update: Mon 20 Oct 2025 10:01:45 +0000
Manifest next update: Tue 21 Oct 2025 10:01:45 +0000
Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: KsAcDdVbjjDZd21ZWciMcFJzo+Zzl+YDRUP5gdmQiRU=)
2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:58:f8:cb:64:27:fd:81:49:67:24:ef:a0:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Oct 20 10:01:45 2025 GMT
Not After : Oct 21 10:01:45 2025 GMT
Subject: CN=97cb94b05388467b5339124aa28fa5c20f66f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:e6:49:1e:1c:5e:81:3d:3d:8e:2d:17:e2:
95:0e:75:76:77:eb:fc:af:aa:e4:39:41:1b:34:75:
a9:7c:4f:bc:98:4f:88:a6:d8:4e:07:c8:11:fc:9f:
b5:b6:56:9d:ff:b7:ee:d2:34:7e:a6:7b:75:f8:cf:
6f:aa:16:f3:f8:43:c6:ef:a9:da:49:05:06:73:c5:
27:16:64:4e:a5:6a:47:cb:ee:b1:d1:1c:25:e0:d2:
f3:31:b6:b5:ee:ff:17:15:ee:ad:78:70:2c:6f:0f:
de:4b:b4:99:ff:a8:0b:7b:96:13:c8:b5:76:3f:93:
ac:95:d2:3d:5c:a3:e1:ae:49:b5:d8:eb:03:3f:d0:
4d:c2:6b:3e:f2:3a:7a:7f:f2:65:5a:85:f7:09:9a:
3d:3b:bb:70:d2:5e:5d:60:e5:aa:f1:6f:7b:51:6c:
9e:44:72:26:05:a4:bf:1b:e8:cf:10:34:e0:e2:74:
d5:d3:91:ee:76:b1:43:73:41:62:c1:10:04:fa:43:
71:6c:5d:43:36:74:f6:10:8c:51:33:21:e9:5d:25:
bd:a9:61:1e:b5:7c:ff:2c:54:8d:a0:ff:33:b9:77:
dc:c3:06:c0:52:e3:ac:a1:cb:b7:b9:43:76:b8:c6:
59:07:a1:1b:3e:13:72:25:40:0e:b5:16:1f:7f:49:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:94:B0:53:88:46:7B:53:39:12:4A:A2:8F:A5:C2:0F:66:F2:1B
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:7f:ab:ed:9d:4e:13:60:65:45:ff:d6:cc:5c:02:75:6a:
e5:81:5c:ce:4a:31:fa:45:2f:72:07:87:84:17:eb:d3:ca:24:
82:41:2c:49:44:02:7b:77:a4:66:03:01:c0:43:b3:aa:6e:5d:
84:a6:f2:90:9a:21:fb:6a:de:4a:c3:45:e5:af:9b:20:98:60:
03:c7:ac:39:6e:ed:55:ff:74:2e:bd:d8:56:19:95:ef:92:1d:
84:e4:ed:b9:cb:84:86:47:46:ab:1a:94:58:bc:04:0f:7f:9b:
99:66:e2:5d:97:73:7b:c0:67:9a:3a:8e:5b:2d:fa:24:e3:c3:
ce:3b:ff:85:04:f1:4a:23:c6:45:55:15:98:92:d2:73:ce:ea:
31:e7:d2:96:f9:78:28:b5:b7:9d:ee:c9:35:78:f6:83:00:52:
e2:c4:d3:2c:a9:70:7b:0c:26:f9:60:7d:0e:fb:e1:36:3d:bf:
77:0c:15:b3:bc:82:ce:9f:f8:f8:85:6b:13:e3:46:7f:09:b2:
6b:1d:ea:c1:f9:7e:77:b3:33:43:04:2d:67:02:ae:22:6e:10:
7e:1e:20:8f:08:40:dc:da:65:0e:20:b1:32:0e:fe:46:4e:d9:
c5:aa:eb:e0:d1:55:a8:94:f0:c6:d6:0b:18:00:e0:94:46:53:
c3:b9:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:01 2025 by rpki-client