Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: upKULNiBLG5DT/cYGjTATe+zbCkEENw7cFomopGel2M=
Subject key identifier: 2F:AF:D4:B2:25:65:4A:D3:8E:0E:ED:CA:55:BF:6A:89:BD:40:AC:2B
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 0199FE472E977ADE9D0B33DA28D2B7A02EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: NZjewgPoNi0SUv96fyg3HayyAq8sclE37acL3TaXpJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2e:97:7a:de:9d:0b:33:da:28:d2:b7:a0:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=2fafd4b225654ad38e0eedca55bf6a89bd40ac2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:ae:a2:c9:70:63:68:31:03:c1:00:47:07:
43:76:0b:da:af:18:e6:92:cc:13:d4:d2:2c:95:7e:
67:48:9c:ad:dc:16:95:25:73:5a:9d:66:52:56:70:
01:d8:b4:84:f5:7c:23:bf:b9:d0:2c:3b:2e:a3:ac:
d6:42:25:45:eb:e2:a3:03:f0:ee:9b:54:af:ec:dd:
5c:37:38:4b:50:2a:26:26:8b:d5:45:e6:b3:05:ed:
28:52:58:86:9e:a7:2b:47:1d:fa:85:d8:dd:e3:27:
73:a8:83:c2:7f:c3:1e:08:fb:65:2f:53:55:72:66:
24:28:b2:6f:ef:1d:c1:47:ee:f2:6c:4c:d1:02:4a:
2e:57:ac:e0:6c:a0:35:67:0d:76:56:2b:8e:78:c8:
e7:81:2d:a0:36:d6:ae:8a:be:9a:59:60:30:52:2e:
18:c9:ba:d7:87:5e:96:a0:44:0e:06:c0:36:dc:8f:
c9:85:d2:33:21:48:84:ed:00:5b:9b:27:26:a1:30:
46:56:84:31:cb:c6:a3:44:d8:2a:bf:71:30:1f:97:
a5:8b:f0:fd:e8:67:de:fc:9d:c1:78:aa:b8:0f:fd:
66:ec:d8:67:36:19:b8:12:8f:fe:59:a3:5c:c6:9a:
7f:33:ab:50:5c:71:f4:0f:1b:c0:87:04:64:ea:eb:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:D4:B2:25:65:4A:D3:8E:0E:ED:CA:55:BF:6A:89:BD:40:AC:2B
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2c:c3:fc:eb:b4:d6:3a:4c:89:3e:4e:87:65:7d:9d:44:7e:
85:9b:be:8a:66:57:70:17:fa:ba:23:12:6f:7c:41:39:b7:fa:
3a:34:8a:dd:99:60:f1:cf:b8:7e:8c:62:2a:bc:a5:40:c6:60:
f0:73:08:f1:f9:97:7e:ee:dc:d1:80:a1:e0:3a:03:96:48:9a:
6c:5b:2f:2d:c5:82:68:24:65:04:26:3a:a0:7b:a4:dc:6d:ed:
64:78:30:e8:1d:6d:6a:28:47:c3:5b:bc:80:1d:3f:51:2d:aa:
78:19:d7:64:fb:82:2b:e4:45:c0:32:37:db:32:d6:b7:6f:fd:
b8:41:5d:4f:f3:19:6e:88:79:b6:20:90:72:85:f5:cd:e1:2b:
c3:63:a2:c8:05:53:48:31:81:9f:70:38:74:94:94:8f:24:50:
0e:ba:aa:de:87:c1:dc:e2:0f:78:07:44:89:96:3c:cd:60:63:
74:d1:7f:a3:4f:00:c8:86:66:91:61:20:50:20:b7:1b:0f:1c:
55:8b:82:a6:9b:c1:ca:f9:c1:e3:00:cb:8e:dc:c8:68:1b:fc:
57:07:82:4a:5d:7d:1c:c0:df:68:79:d0:67:46:b4:b9:06:6c:
3b:c2:11:83:ee:7c:07:f8:ff:f0:b8:40:d9:93:f5:f6:e8:15:
06:91:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:11 2025 by rpki-client