Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: 3C5/xDwEZdwyqTNawDPLamd13PXYi4cM+NXNLxDQjC8=
Subject key identifier: 9E:B8:85:F9:17:5C:61:AE:0A:23:9E:80:30:C6:9F:AA:DB:2A:6F:2E
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 0199FEEBEB295543B4BF0D00D07B80F9AE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: LrfYoV7NqtjFq7hMv8gefijhSKHbxbNtF5RRMhT0P0U=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:eb:29:55:43:b4:bf:0d:00:d0:7b:80:f9:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=9eb885f9175c61ae0a239e8030c69faadb2a6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:fa:9e:d8:ba:44:89:8e:11:fc:a5:67:42:
b4:c7:83:6d:49:4e:88:32:21:e8:27:46:f2:ed:19:
1f:8e:a8:de:89:dd:0d:2c:54:d6:06:7f:15:f5:ba:
c8:ec:22:a0:11:5c:a1:83:3e:ad:54:a4:4e:c5:fe:
73:15:7a:f8:05:30:c7:bc:be:a9:37:60:67:77:ce:
09:00:33:c1:60:33:ed:78:9c:95:8c:7e:25:24:70:
8f:42:f1:46:cd:64:a7:98:f2:79:4b:d3:fc:15:33:
dd:7d:a6:0c:f7:91:6f:83:10:47:2e:d3:93:61:bc:
5f:f4:7b:e9:e7:4c:a8:5e:36:8b:c7:f3:30:6e:a2:
2a:a3:a9:cb:6a:e2:55:9a:41:65:1d:0e:85:9c:54:
82:7f:cf:ef:64:36:ca:b9:0a:72:bc:61:f1:39:ae:
8c:68:d8:57:b1:aa:b3:a8:5f:bc:a3:6a:67:d6:7d:
78:86:ca:ae:df:94:ab:72:c0:0a:cf:a0:88:7a:25:
73:06:c1:fa:60:f1:b6:f0:f5:5a:9a:b6:08:4e:8a:
67:75:af:81:7b:3b:85:1e:c2:f4:2b:d5:32:29:dc:
ed:0b:6a:2c:e6:6c:86:ac:20:34:47:1b:ad:dd:17:
04:08:a3:66:b4:5e:f4:76:96:69:a6:9c:86:7a:5f:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:85:F9:17:5C:61:AE:0A:23:9E:80:30:C6:9F:AA:DB:2A:6F:2E
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:bb:cb:7a:40:a7:5b:8e:10:61:a9:0d:69:73:c2:62:14:
bf:1d:96:86:ee:e6:30:e4:b4:f9:46:07:dd:df:3b:ec:b2:72:
29:03:77:95:a9:67:87:5e:c6:b6:38:82:3e:3f:b1:49:57:70:
89:25:84:63:7b:61:fe:55:f6:c5:86:75:81:fe:9e:9d:cb:e7:
7b:5c:a3:74:13:d4:0f:4c:32:3a:11:65:eb:85:ca:5d:23:ce:
69:d4:0e:0f:19:fa:85:91:a2:2b:0c:a3:1d:20:71:c8:e3:19:
70:d2:fb:fb:a9:70:7c:29:3a:47:17:62:f8:97:4b:aa:a9:93:
44:02:61:7a:0b:35:09:6d:97:38:43:c4:bb:42:f9:0b:9f:32:
7e:87:9e:74:06:a8:ea:87:0c:82:f1:d8:8f:b4:e3:eb:9d:af:
8f:2c:0d:7b:59:18:d6:bf:42:d1:e1:9f:ce:7a:41:1b:dd:51:
2d:7a:19:88:16:c8:18:87:f0:7a:40:da:32:a4:ea:2c:01:1c:
1b:09:ed:d5:f8:65:ef:75:ca:91:4d:04:87:6c:a9:70:e7:9a:
03:52:5c:67:5d:15:6f:ff:25:8d:f3:68:43:b6:ef:9b:ef:63:
7b:13:b4:a5:46:74:a7:f3:13:c2:07:d5:db:aa:0c:af:30:d5:
83:ee:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:45 2025 by rpki-client