Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: OUzFgWVrja1ukFgWsVvvHik6/KWlNjgmBTIV2BmtQcA=
Subject key identifier: 1C:8F:30:0D:52:8F:2E:29:14:9D:F0:68:51:6B:6F:1D:91:05:4F:77
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0199FEEBCE3CF93DDED3477086E06FD2D4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 00:01:30 +0000
Manifest this update: Mon 20 Oct 2025 00:01:30 +0000
Manifest next update: Tue 21 Oct 2025 00:01:30 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: jJyrHvP0p180VEhVRC0R0VkvTNRu1/nFMFEbfWXZb84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ce:3c:f9:3d:de:d3:47:70:86:e0:6f:d2:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Oct 20 00:01:30 2025 GMT
Not After : Oct 21 00:01:30 2025 GMT
Subject: CN=1c8f300d528f2e29149df068516b6f1d91054f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:66:6b:65:7c:8c:a1:60:92:0b:e5:16:38:
ee:20:6a:6c:5e:a3:55:62:1e:08:a3:30:b6:ae:eb:
fc:8f:5f:c1:b5:99:5c:16:31:f7:7f:2e:77:34:00:
59:03:f0:40:65:c6:3a:c1:97:95:96:b9:67:1f:79:
2b:b2:70:4a:76:fb:68:6c:e3:39:ef:0e:92:5d:6b:
59:61:56:a5:91:08:1d:b0:c3:bd:9b:9e:22:53:90:
8b:f0:3e:92:28:bb:62:48:f2:7b:6f:d3:40:f4:43:
b3:7f:25:63:54:08:75:04:9f:b6:bf:49:33:ea:0d:
14:25:af:17:0d:0d:00:21:ad:e9:6d:bc:53:45:c1:
a4:c1:22:e4:52:01:2c:9e:c0:c1:3f:69:df:85:6c:
2b:c0:6d:88:b1:77:0c:0c:0a:2f:f7:6d:13:71:a5:
ae:ff:0d:95:94:be:33:e2:58:99:12:cf:6a:8c:a9:
b7:3b:fc:bd:02:2b:dd:f8:9b:f3:3c:08:cb:09:2a:
f9:c7:64:a6:18:76:b5:58:32:2c:a5:51:6f:67:42:
05:05:9d:2a:54:fd:8a:c5:c4:a1:23:2d:c4:53:5e:
a0:06:08:7c:38:f8:c1:c5:54:c2:92:f6:c7:e5:4b:
89:82:bd:e4:07:be:1b:36:84:37:ec:c4:5a:5c:41:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:30:0D:52:8F:2E:29:14:9D:F0:68:51:6B:6F:1D:91:05:4F:77
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:14:ad:95:e7:b9:2d:74:6e:d7:7a:16:22:be:f8:75:63:e3:
40:57:b8:b1:3b:d0:a4:28:f1:66:c8:ca:77:67:76:c8:d9:64:
ef:a8:8d:15:38:30:9c:20:b2:15:1f:f8:cd:6e:1c:1b:ed:d1:
88:0b:8e:b8:4c:ad:b4:6d:3f:4f:62:84:07:1a:17:48:d5:2f:
51:66:64:ee:53:27:0f:03:d4:d2:1f:9f:b0:ba:63:be:95:38:
fc:20:a5:58:12:c2:63:a2:8d:45:e5:a5:cd:3d:66:e2:9e:ef:
b4:77:fb:25:ea:f1:cc:61:be:72:cf:b2:c2:b3:fd:c9:33:aa:
9e:57:18:35:e9:89:92:33:a6:0d:50:5d:20:2b:83:01:5c:39:
b7:9a:80:be:1a:92:87:5b:33:2a:41:3f:e2:34:0a:f4:21:64:
77:29:ef:d9:00:49:c0:5a:2c:05:15:91:6b:c7:6c:32:5a:28:
9f:11:7c:73:0c:f1:a6:34:c3:02:86:b3:79:0c:af:b4:ef:63:
d5:dc:47:6a:fb:7d:10:82:76:a4:fd:90:b3:44:36:71:5c:82:
c3:75:e4:f5:1e:3e:0d:8f:67:d1:55:5f:99:a4:c7:d3:f2:e0:
35:d2:91:5d:e1:06:ab:22:9e:bc:ff:ea:ac:7c:00:f3:e7:6d:
46:35:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:01 2025 by rpki-client