
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier: 6c1mmGc28iEzlVVXet8OICpKO8v+YoLHuTmL1j2Y/D4=
Subject key identifier: 6E:FA:B4:72:BE:79:18:76:8A:37:8C:FD:92:2E:51:1D:08:D9:97:81
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 0199FBB36254F9F76064D758E1B34E02478E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=)
2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=)
3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=)
4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: lRx/RNwkR08/qlKAqPlZRgGzxwNCjsvR48nbs4yZXgw=)
5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=)
6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:62:54:f9:f7:60:64:d7:58:e1:b3:4e:02:47:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=6efab472be7918768a378cfd922e511d08d99781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:ac:c9:f4:4d:89:7b:10:59:5d:8a:b1:5b:
da:d3:59:b9:df:6b:d0:a6:94:03:b6:f6:35:70:aa:
fb:23:17:15:12:2d:d4:90:58:24:32:21:dd:15:0a:
7b:34:84:67:d7:dc:91:94:16:69:08:a4:6d:3b:4c:
4c:20:83:6e:ea:b7:6f:31:58:57:a6:87:77:ae:66:
90:26:f6:57:51:03:7e:70:6f:7f:d5:82:8d:3f:86:
ab:b7:f9:b2:9b:0b:4d:a2:1a:cc:93:5d:bd:b5:f7:
a6:7d:d6:dd:fa:83:5d:d3:10:44:7e:21:e5:4e:d3:
10:55:95:6a:8a:3b:a5:fd:d6:3e:b7:42:78:e8:c9:
b3:e7:05:38:03:0d:66:84:7e:b6:45:1a:a0:c7:8c:
3e:fb:51:7e:86:e9:57:ca:01:03:e2:4f:15:d9:33:
d5:a8:65:46:6f:70:f3:a0:4d:85:6d:af:3a:38:07:
9a:83:be:24:52:f7:b5:44:c2:f9:40:d6:0e:32:14:
50:ab:11:66:8e:fc:14:ec:5d:05:ba:47:eb:14:66:
56:50:d0:f3:6a:ee:00:f1:22:5e:b5:df:fc:04:7f:
62:ff:33:59:a5:73:d1:c6:35:b0:7b:a4:d9:57:9d:
21:ee:a5:be:77:6c:94:49:b1:be:d3:46:77:01:30:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:B4:72:BE:79:18:76:8A:37:8C:FD:92:2E:51:1D:08:D9:97:81
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:ca:f8:d3:d8:6f:f9:4a:24:1f:0d:27:b2:74:ed:b5:31:
c0:a2:8f:40:d6:4d:25:18:1c:98:eb:7c:b9:3d:d8:fd:c8:f0:
0c:56:ee:39:af:ef:85:3e:ee:60:98:b2:f9:cf:f1:6b:e8:b1:
49:c4:f0:1e:7a:d8:4f:73:60:3a:58:1a:93:1c:e5:34:09:3d:
e0:54:e7:98:05:0f:8b:cf:9f:02:f3:26:37:2c:8d:2a:01:a7:
05:d9:27:95:dd:54:11:c0:6a:3d:c8:67:41:4f:e6:ef:ec:93:
76:13:69:43:09:4a:44:f2:08:a9:ee:5d:97:5d:94:ee:12:01:
53:5e:b1:ea:1d:19:aa:4d:30:e8:5d:d4:a9:90:46:f1:af:2f:
f0:b7:11:68:f8:4b:28:23:77:99:42:49:21:f4:21:53:96:ba:
3c:6f:8c:98:30:1c:bb:3f:fc:e6:5d:5b:d6:dc:ac:c8:fe:0c:
58:76:93:35:d3:c4:2a:28:ef:e2:ad:e2:77:d7:33:3d:74:cd:
67:56:2d:61:b5:f6:0e:4a:39:e0:a5:0d:24:82:ee:1f:32:17:
df:72:d3:a8:93:27:11:2e:60:04:e0:b4:79:33:3b:99:f7:3f:
8e:c1:35:b0:20:8f:2a:79:8e:e4:d8:7a:ce:e7:35:5a:43:c7:
22:94:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client