Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: VKhE96nLHHKuamq4rN+e+tuGeXfSvaug3ZPItlXyQms=
Subject key identifier: D4:BA:DC:19:33:DD:CA:A0:41:0A:85:9E:13:51:2F:B8:58:9B:99:84
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 0199FFC841733C2E6986AF4C8EEBD4379C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 170E
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: cSeNkAadXsE6IImSqkdqc3ZC6VA.roa (hash: tYyl96XjKTlVSNpRI5StDuloRbirGgK5L75RjQRM3Eg=)
2: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: +Dk8xEHUXPc9OM4Wj/FqZtMeoOWpd5e4uuRTjqUxyy8=)
3: iyAReQYZi6annFwTzxnNMi_NX88.roa (hash: RA8Tw9Fc/DRqwFBqIp5rQULzzVh8lGYGH4fnEdfI7zE=)
4: onQc6RXgIQfb3aGGII4Ouo46uLk.roa (hash: YBoMTfa2KP4rZrIUbdsss9ucz/bO7zkPPOfx3KzpJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:41:73:3c:2e:69:86:af:4c:8e:eb:d4:37:9c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=d4badc1933ddcaa0410a859e13512fb8589b9984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:d4:ef:98:ef:dd:66:e7:25:70:81:16:15:
8b:4e:d7:4c:08:fc:1e:60:41:12:cf:1a:f6:b2:f9:
e2:d0:a7:a9:da:0d:9f:ec:04:7c:84:d9:49:5f:a7:
9a:b5:22:c4:3a:96:b7:6a:7c:70:36:f1:c4:85:f2:
da:37:5d:66:27:3d:4b:e7:c0:46:f6:23:46:c3:df:
e3:47:8b:2a:4e:64:78:fc:e4:19:cd:32:c3:63:6c:
93:14:f9:c8:fb:9a:6d:4e:f3:8d:ab:7d:3b:68:a0:
11:d4:a0:f8:bd:ce:08:66:b3:5c:10:1b:5a:aa:e0:
a4:83:f3:22:08:e2:c2:f0:81:53:12:d2:a3:16:6a:
e6:d8:35:1c:7c:01:c4:e6:79:54:4a:8d:32:9d:02:
7e:20:e2:c2:ec:9e:22:6d:7d:7e:7e:c1:83:ac:68:
c9:22:2f:69:db:f2:70:38:ee:78:7f:a8:1e:29:39:
70:0b:49:fe:f3:a8:33:58:34:bf:63:4a:bf:bc:4b:
a2:b4:7e:69:b2:da:f0:04:90:58:44:88:73:b4:7d:
22:3f:ba:f1:0a:87:bf:89:ab:75:3f:56:7e:8c:1b:
4c:37:b1:b2:d4:50:d9:a9:da:1f:fb:bc:4d:25:82:
59:3f:17:35:65:75:f9:7a:3a:c4:54:4a:a8:c8:af:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:DC:19:33:DD:CA:A0:41:0A:85:9E:13:51:2F:B8:58:9B:99:84
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:26:42:dc:e3:2a:67:f1:d2:9f:a8:4f:71:55:83:24:fc:0c:
3b:3b:73:24:cc:10:c3:f1:13:2f:17:42:69:2f:5c:d2:d8:3f:
06:93:34:20:e9:f1:9f:16:2b:ee:1f:7d:32:c3:93:d8:02:81:
05:b3:72:2b:2a:1b:95:59:0b:6d:26:51:bd:be:6d:b3:5f:1a:
0b:4f:6d:b4:cd:c2:e2:d6:eb:11:20:de:78:87:ce:b9:25:7b:
89:83:3f:c1:3f:42:5b:8c:44:f4:57:31:39:42:3e:96:27:2e:
0a:13:32:dc:24:86:3f:0c:40:d4:c1:4c:1f:91:93:0f:a1:3e:
40:71:fb:a2:d5:25:2b:00:6e:46:9c:f6:e6:b8:a1:21:fe:88:
ac:2a:4d:e7:6f:36:d0:a4:da:3f:15:56:07:e3:18:a0:59:ef:
5a:ff:6c:12:42:1c:c0:7d:65:6c:84:97:50:3a:37:38:b0:d6:
86:50:77:62:fe:fb:17:82:90:c7:14:fd:b7:a8:36:25:30:ef:
01:d2:f5:42:b9:49:e2:33:2c:7c:94:ca:2c:8d:52:bf:45:f0:
00:80:eb:1c:60:99:69:71:bb:29:d1:ed:6f:36:33:01:75:9c:
53:73:b0:5f:f6:26:da:8e:8a:78:7b:4d:a7:02:57:46:d0:a1:
c4:fd:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:23 2025 by rpki-client