Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier: SRreXGDtD6Kflvm3DAuhqwkG1WxSN5AIrp2E6f04vjE=
Subject key identifier: 3B:AD:C8:CD:EF:B7:C0:62:58:BD:49:E1:02:A7:A5:D4:5D:9C:74:1F
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 0199FD33F2980196DABA571FFB071B238BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: eUhn29XPHWhUm+dyz4j1C2nl+BLoxZKFhVUADRHgvEs=)
2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f2:98:01:96:da:ba:57:1f:fb:07:1b:23:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=3badc8cdefb7c06258bd49e102a7a5d45d9c741f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:5a:ca:3a:b2:30:e3:a5:b8:e1:9d:1e:67:
89:df:87:8b:f3:5e:bd:ab:2e:61:91:2c:9e:c3:0e:
38:20:16:78:47:de:aa:f5:9a:d2:56:7e:f1:71:f1:
03:63:ea:37:84:d2:cd:47:04:72:77:2d:e6:04:21:
be:b1:90:87:e7:b6:21:12:f8:e8:33:87:aa:d6:e2:
9a:85:b4:ac:13:cb:74:12:4d:c8:8a:6c:e9:4d:df:
53:21:cb:e5:20:6f:24:0b:d3:b2:c9:73:da:83:a1:
07:9d:b1:4c:b1:36:c4:18:c2:91:2d:e1:f0:a9:42:
d5:58:ec:32:c7:fe:19:16:7d:0c:2f:c5:25:ea:aa:
60:31:0d:b6:93:72:88:b7:a1:c3:64:61:dc:81:79:
b0:44:bf:83:f3:9c:ba:fd:de:b8:8f:6d:2b:0f:0b:
91:06:0f:dc:b3:a4:9d:c7:f1:a6:b1:a6:6b:cc:17:
aa:81:1c:62:69:24:01:60:8d:4a:22:4b:0c:12:d3:
43:65:17:77:14:fc:46:5d:5b:ba:79:13:4d:65:80:
8a:a1:a7:1b:da:7b:17:01:c4:5f:cd:b4:f7:7b:b7:
6f:cd:63:89:cc:4a:2b:95:c6:3e:dd:8e:0d:f9:3b:
24:c1:f3:93:15:6a:05:a1:0b:0c:34:0f:47:f4:14:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:C8:CD:EF:B7:C0:62:58:BD:49:E1:02:A7:A5:D4:5D:9C:74:1F
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:77:f4:72:86:5e:91:65:ba:0c:29:6f:5f:da:f7:02:c5:c3:
67:6d:c5:e1:84:f5:3f:be:52:de:62:d7:80:d0:28:1e:82:61:
13:06:69:37:4e:c1:7c:93:e2:54:0a:23:e4:94:91:d1:b7:47:
10:79:e5:6a:36:b6:dd:3d:fc:01:23:e5:39:39:67:58:41:70:
45:39:0a:67:85:54:98:ec:3a:2c:38:73:2c:1e:fb:01:ce:97:
c7:22:d6:da:55:aa:af:f6:e8:41:ad:06:9e:83:4d:78:b0:b2:
7c:86:c6:6c:0c:06:ca:ee:a5:d5:16:69:73:5f:de:ed:ac:df:
01:41:50:8d:10:7c:c7:b9:dd:b0:24:bb:3d:dd:8a:a3:3b:10:
2a:93:d7:1e:99:97:34:a6:0e:da:4c:d6:4d:4a:32:53:52:fc:
67:06:a9:21:fc:f6:28:88:01:e9:e2:28:aa:d2:03:dd:fc:d2:
00:9a:59:7e:66:ee:b7:aa:65:a7:bd:af:67:27:d3:14:ed:66:
40:74:2e:69:03:83:26:5f:c4:e2:cb:b9:80:46:01:b4:e4:d2:
9a:7e:16:79:91:2c:c9:36:5f:db:54:9a:63:3f:0d:30:07:b9:
35:da:2c:d9:7c:e2:2c:ec:d6:1c:40:2a:a8:10:ef:97:22:11:
92:9c:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:11 2025 by rpki-client