Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: U1TFTVPf2D9ceiEZnYLHNnulD1J8pyXKs/rfD6ZipWA=
Subject key identifier: FB:BD:16:C2:CE:05:65:9E:F1:71:EB:7C:88:18:1F:9F:9A:AB:B9:14
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0199FC582562918E3F26A61F032BF7EB4ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0BA9
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: ObsVAwDUDGubmDg2MBeJ5NqnmylTP0+/cz5EI4t9bYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:25:62:91:8e:3f:26:a6:1f:03:2b:f7:eb:4e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=fbbd16c2ce05659ef171eb7c88181f9f9aabb914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:8c:92:a7:ca:22:bd:fd:a6:10:e6:c6:52:
35:84:36:1e:32:fc:19:5e:30:5b:d5:f0:3b:0c:cc:
70:00:0c:4b:36:8e:0a:e2:14:96:c0:f1:9a:e2:f5:
31:61:5b:eb:4d:bb:e9:f0:ec:4e:43:53:b9:ce:c0:
12:43:8e:a5:ec:11:34:23:a2:18:4a:1d:84:80:1f:
26:75:c5:a4:1a:cb:c1:74:70:ba:ba:c0:5c:2a:23:
f6:19:89:5c:84:da:68:87:7e:5d:52:2e:32:e9:c3:
2e:67:ff:c8:b7:c5:02:e1:37:1b:7d:de:3f:dc:50:
4e:05:0a:ee:af:8d:84:24:54:e8:5f:0a:c1:68:93:
b6:b7:51:11:d3:a9:2a:96:4d:05:71:ff:a6:59:b7:
cc:d1:22:b3:77:a2:32:89:2e:e8:5d:f3:97:56:41:
bd:d8:b0:51:1a:0c:66:8f:77:e2:49:de:01:de:bf:
89:47:28:6a:97:af:e7:2e:51:45:6b:78:db:0d:25:
f8:55:93:2a:c2:92:79:f3:6e:f8:86:54:c1:57:9d:
7a:62:76:a9:00:66:46:37:04:44:3f:94:d6:4c:23:
ed:2f:51:46:9c:e8:4d:5f:fd:4e:31:a8:f8:a1:56:
b2:3c:bc:35:3f:9c:7f:1d:8e:6c:e6:6a:a2:04:9b:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:16:C2:CE:05:65:9E:F1:71:EB:7C:88:18:1F:9F:9A:AB:B9:14
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:f0:da:83:61:3c:a5:74:e7:31:26:fb:4d:1d:b1:f6:17:
78:e5:30:5b:25:9c:e3:4b:d4:d3:0b:64:64:86:cf:6d:b9:20:
a3:c6:f3:fe:32:56:c5:9f:1d:e1:b2:c6:7d:21:b9:a9:f1:b4:
e2:33:4f:f6:a1:33:f5:94:46:98:2e:a2:cc:f0:1d:78:41:af:
c6:30:f2:a7:c2:e3:74:a6:82:f4:25:43:15:b4:02:0c:89:22:
54:97:41:36:ec:cb:b8:2c:32:3a:0e:08:68:e8:e1:a0:d5:04:
1c:c4:81:2b:45:63:ce:72:43:f4:09:1f:ae:93:f6:26:69:46:
e6:1f:7d:45:80:ce:ac:02:e1:49:98:16:36:b2:72:9b:ee:ad:
ce:3e:33:af:e0:24:8a:41:0f:05:3a:fb:82:f2:60:09:e0:49:
c7:25:06:84:91:ba:2e:2c:9e:e2:fd:22:22:5a:eb:46:e4:df:
cb:1f:01:d9:9e:26:18:ba:8a:0a:4e:37:1b:dd:c6:95:80:60:
77:23:b3:f0:c6:9c:01:4a:f4:e0:9c:5a:42:da:89:c7:ce:49:
0d:41:f5:d9:d7:87:8d:0e:f7:8f:73:e8:34:e1:aa:1c:88:f9:
57:6a:68:a4:62:cc:36:48:d8:b1:a1:8a:12:89:36:cc:a7:a7:
07:ca:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:13 2025 by rpki-client