Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: VTJZAW8q7kUbplwTNCGVF5Mvu9OzGY5A6beM11Se6D4=
Subject key identifier: 22:88:96:DF:0D:A9:1C:23:F2:1E:D1:ED:28:27:84:69:17:27:C7:70
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 0199FDDA0BE5711A2D0051BF5513BDDAE76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 07BC
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: TIIalH3lBtmHGhuJQP/y3giw4VRO7xiVNarZAtevmFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:e5:71:1a:2d:00:51:bf:55:13:bd:da:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=228896df0da91c23f21ed1ed282784691727c770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:f0:f9:ce:56:cf:74:d8:b6:bb:8b:95:99:
93:fb:63:a0:70:43:a4:cd:09:4c:2e:52:25:ea:c7:
bb:10:8d:25:40:20:84:19:72:81:6c:a2:fd:3d:d2:
75:f5:1c:05:dc:43:0a:a6:af:3d:49:b3:21:52:84:
6b:bb:7e:3a:40:fe:4c:07:75:ff:fc:24:e2:5a:43:
56:25:40:6a:a8:86:8a:3b:12:9d:e4:f1:e5:60:f1:
1c:19:5c:91:e7:38:b4:f0:37:57:d9:c2:b4:17:83:
0b:4b:e3:2c:a4:30:97:f9:4b:8a:28:c9:02:a0:8d:
e1:05:d0:b8:f5:b8:ab:f6:50:56:39:89:4f:e3:e3:
5c:bd:b4:4a:d1:aa:9c:96:71:a1:7f:0c:98:ef:b9:
0d:6b:ba:bb:62:e3:f9:dd:fe:e1:72:64:f5:c2:51:
86:c6:8e:3e:54:56:01:bd:b9:d5:46:89:5c:30:22:
fb:e9:d1:7b:11:4a:90:25:ee:55:a4:eb:c3:5d:5a:
30:34:16:7c:e7:71:45:ee:67:a5:9e:23:c1:e5:e7:
7d:44:cd:bd:a3:28:76:03:e5:35:1f:b0:a2:a2:e8:
d8:07:ab:2d:01:04:43:a0:17:5e:ce:55:da:0a:77:
51:3c:23:ad:8a:69:19:17:32:26:68:d3:47:59:6f:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:96:DF:0D:A9:1C:23:F2:1E:D1:ED:28:27:84:69:17:27:C7:70
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:09:06:0a:f6:18:ab:83:a3:47:01:1a:5d:bf:77:d4:e8:
f7:44:b0:38:3d:06:ac:6b:3f:b9:da:0b:61:03:e8:fd:a5:ce:
a0:15:ea:51:1c:51:2e:0d:d8:6d:10:c9:01:d6:67:23:e7:1b:
f2:73:54:ec:3a:f5:34:e1:08:f2:71:89:a7:79:d0:5b:92:9f:
58:7d:56:81:59:10:fa:5b:f5:a9:9f:e9:0d:f4:d2:e9:67:67:
c5:86:26:ed:14:5d:c4:1e:e8:d6:8a:61:2b:33:65:f7:a3:5f:
d8:d1:64:36:d8:33:ae:f2:9f:30:2e:43:bc:28:17:79:ef:07:
99:8f:e7:3a:f7:95:d1:72:25:03:d5:8b:da:85:65:84:13:f1:
a3:e3:db:ff:bf:ef:24:af:7e:30:29:32:55:0d:c3:5d:c2:1f:
a8:7b:ba:8b:a1:78:8c:f9:fd:57:80:e3:9d:2f:27:f0:23:72:
43:4b:97:a0:2a:b1:61:11:a5:fb:56:a0:a9:eb:28:95:e4:54:
cc:5e:37:17:ea:af:75:85:e9:f5:a6:82:8f:fd:d1:12:4b:71:
b7:73:f5:22:10:74:8c:00:f8:67:75:ba:71:e0:b1:68:a7:87:
76:33:f8:07:80:c5:6f:c3:bf:3c:c1:19:07:6f:4a:00:ca:8d:
e2:66:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:29 2025 by rpki-client