Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: 0SuGZax2x14Qw1sStu2zj55gVJqUP1Y8TpWi1DtUvgw=
Subject key identifier: 34:C1:53:B4:C2:E3:D4:F0:BE:7B:0B:4A:5D:54:2C:93:F1:03:43:89
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 0199FB0F44EF300A876FC36B9054F9F9C417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
2: NJxwRBkvshih-xmgz1X2qxZLLGU.roa (hash: WAXGkwJLmpUUMtECpnkhuJeq2y5mE3vQZXofWlN+lAo=)
3: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
4: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
5: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: ugurvKqnYwpDyHSTSvXp/siV/dhXdm6N3SfsQLwOoyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:44:ef:30:0a:87:6f:c3:6b:90:54:f9:f9:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=34c153b4c2e3d4f0be7b0b4a5d542c93f1034389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:6f:64:93:b9:a3:dc:40:70:87:17:23:ea:
64:5d:26:02:7b:2b:38:87:59:28:8b:1c:b0:15:ff:
2b:79:76:79:08:51:2b:50:d2:10:00:db:83:d1:21:
f3:f8:bc:14:32:7d:16:56:9d:73:93:ce:5e:aa:74:
3e:da:1d:22:f4:00:dd:74:1f:cb:b9:a3:62:a9:02:
97:1d:69:c1:52:63:bc:1e:c9:6d:ad:d4:f9:0f:7f:
d2:75:2d:a4:98:4f:2e:c0:ce:ae:05:cd:b7:11:53:
d6:b3:b6:4d:fe:58:83:42:c9:ec:a5:b5:0d:5d:a0:
29:5b:38:d0:4d:e8:e1:42:69:0a:5c:ae:15:4b:2e:
f9:75:f4:5c:92:93:83:d8:54:5f:b1:75:be:eb:68:
1b:bb:8e:17:a1:d1:3c:0b:22:4e:f7:91:15:0c:1b:
0c:11:a5:ea:5f:75:a6:d5:d8:0d:af:fc:51:8b:a1:
eb:e2:8a:c6:84:6b:a9:36:42:29:dc:b2:3d:7a:4a:
ca:54:08:2d:c9:9c:21:fa:4f:b4:bd:6b:45:8b:3c:
44:0b:be:19:ad:b5:d0:00:5a:bc:2f:87:c1:59:c5:
9f:2b:ef:32:63:40:66:37:d0:a2:33:78:5b:8f:82:
6c:14:ad:e4:a3:c3:97:7f:38:53:95:2b:96:d8:4b:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:53:B4:C2:E3:D4:F0:BE:7B:0B:4A:5D:54:2C:93:F1:03:43:89
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3f:c6:e3:56:e8:9c:8d:d6:75:aa:ff:53:32:02:17:74:98:
05:45:cd:71:8f:27:cf:4e:9a:b1:a7:8a:f0:fb:c3:4f:d9:c7:
8a:9c:2f:eb:c9:1f:3e:a9:2b:71:8d:ee:5f:5b:20:e2:85:b9:
dc:76:aa:8d:bd:56:23:bc:36:fc:8c:96:b4:68:ea:d6:16:e4:
0c:5c:72:fa:1c:fb:7e:a9:ab:3c:23:40:1c:74:fb:b9:fd:ce:
85:d8:04:44:19:2b:87:4e:3c:83:90:0c:75:f4:ca:87:4c:50:
bc:d8:4c:2d:1b:a3:76:7c:a9:b9:ca:a6:35:98:cd:5b:b4:cc:
d5:94:63:cb:a3:3a:4a:d9:9d:74:ee:31:e2:c8:b6:c9:e0:eb:
60:57:dd:11:31:b0:5c:b8:f5:72:1c:24:99:0d:f5:3c:8d:a2:
7b:a6:de:40:d9:d3:7c:67:b3:84:a9:3e:9c:a9:3e:cf:52:c8:
1d:a4:b2:9b:43:7e:4a:22:f1:08:0e:a9:52:5c:ca:c2:6f:c5:
b8:96:89:4c:9f:42:47:df:54:38:df:4c:a6:06:5c:5b:8a:11:
0a:b4:e4:63:93:96:80:b6:2c:da:f7:97:d8:f9:0f:96:fe:a9:
e9:1c:87:04:cf:e7:3c:13:ae:ee:0b:7d:f2:81:63:32:1e:8a:
72:57:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:08 2025 by rpki-client