Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: snFsyLXXKry1C0tygxITztRcuImc4qHQA7wJG8JxZk4=
Subject key identifier: 51:C1:B3:CE:3B:E4:88:27:2D:30:9C:35:88:7C:13:30:48:66:54:51
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0199FF22EEAAE22C3180F40FC47B72200D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 1153
Signing time: Mon 20 Oct 2025 01:01:43 +0000
Manifest this update: Mon 20 Oct 2025 01:01:43 +0000
Manifest next update: Tue 21 Oct 2025 01:01:43 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: 0lefzPGjezh+/4KmsFjT3ncD8zd3S2xev38jmIFazws=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ee:aa:e2:2c:31:80:f4:0f:c4:7b:72:20:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Oct 20 01:01:43 2025 GMT
Not After : Oct 21 01:01:43 2025 GMT
Subject: CN=51c1b3ce3be488272d309c35887c133048665451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:3e:3a:5f:22:fa:4e:57:46:24:cd:14:ad:
b0:08:90:85:3a:24:e2:04:bc:93:3e:94:ae:66:c1:
0c:77:ec:93:56:92:ee:ba:68:b1:35:c4:53:9f:1d:
98:c0:5c:85:5f:f0:b8:ac:e1:c9:2b:1a:8d:75:c3:
47:77:fb:52:b5:64:da:f3:c8:2e:33:de:58:ba:c3:
23:06:64:b3:bd:57:bd:e1:a2:77:bc:ab:3f:3e:b6:
3f:31:14:09:a4:fb:74:bf:01:3d:27:8c:22:aa:12:
c3:e4:ed:b7:f4:44:b8:f9:bf:ef:0d:d4:8f:fe:a9:
6b:3a:f1:d8:d6:d4:9c:57:96:16:a3:f1:b5:4c:5f:
ec:8b:f4:20:62:3b:97:be:ec:5b:13:e3:e8:8a:4a:
46:b9:04:ac:93:50:1c:3b:af:44:9d:ef:8e:2f:69:
c5:94:f5:98:14:64:90:fb:12:18:22:a2:8e:44:4a:
5b:87:83:a0:ff:de:7d:f4:2f:b1:8a:df:66:32:dd:
5a:34:b6:e7:16:bc:c4:74:a8:ad:4e:3a:53:1e:6b:
fd:9f:4e:23:5a:90:6c:69:66:4a:e0:88:f6:7c:f6:
e5:5b:10:9e:1d:d3:0a:43:a7:2d:bb:86:09:bd:48:
d1:a2:bc:b9:70:62:fd:de:77:67:51:ac:0e:15:ed:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:B3:CE:3B:E4:88:27:2D:30:9C:35:88:7C:13:30:48:66:54:51
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:cf:5d:36:bf:e6:e0:13:3e:3f:59:d9:38:36:28:12:86:
0f:70:84:3d:f6:8c:11:69:df:c1:88:2e:04:48:fa:42:6a:6a:
75:e2:bf:37:b5:ed:e5:0d:cc:66:f8:60:34:cb:14:61:63:f5:
a8:c2:9c:6c:49:09:7b:88:46:bf:cb:91:7d:9b:3c:39:47:51:
38:ec:d1:ce:84:ca:06:25:0a:99:94:4d:7f:6d:51:d2:55:66:
57:ee:2a:da:b8:54:62:84:32:83:41:0c:c4:2a:1f:f8:36:4a:
87:86:04:e1:62:61:2e:4d:10:54:a0:40:3a:d0:4a:13:95:d7:
88:98:fe:10:52:88:80:93:8f:a3:80:32:57:cb:71:e6:65:3e:
db:f0:36:98:a8:1a:61:d0:26:92:c6:ee:4b:6a:28:ca:7f:e8:
83:7c:8d:fe:c3:18:4b:9a:0f:8e:9d:80:31:4d:d3:16:a4:83:
51:c0:36:c9:e5:50:c7:23:7a:f1:8e:f9:36:66:2e:95:8e:aa:
82:9a:bf:9d:45:ab:c0:a4:c4:20:af:b7:c2:7f:fc:50:c8:f9:
e5:0f:0f:99:e7:43:71:e6:85:16:d3:ac:05:62:bc:dc:fb:f0:
50:c1:a0:57:66:c8:2c:67:79:61:90:a9:45:91:e2:62:75:81:
79:7a:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:01 2025 by rpki-client