Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: t1loo7d6wR1Ynl4CO3xmlPKmOOotH3o8iwqxSrD8o3w=
Subject key identifier: 40:AB:B8:0D:04:98:1E:69:B2:78:D8:9D:6E:0D:9F:D6:EE:02:C1:31
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019A0111407B8EB6CBA55DD2FE53722A4796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 10:01:39 +0000
Manifest this update: Mon 20 Oct 2025 10:01:39 +0000
Manifest next update: Tue 21 Oct 2025 10:01:39 +0000
Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: oCbsfKcI/Kwg1u/pAt8jib21IVmLQDxqYcvjRcrszRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:40:7b:8e:b6:cb:a5:5d:d2:fe:53:72:2a:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Oct 20 10:01:39 2025 GMT
Not After : Oct 21 10:01:39 2025 GMT
Subject: CN=40abb80d04981e69b278d89d6e0d9fd6ee02c131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:f4:8d:f5:ab:44:f1:63:05:3d:7b:c4:b2:
39:d7:8f:08:34:1a:b5:73:3d:7b:bf:4e:cc:31:36:
e5:9d:9c:b3:d6:f4:8e:6b:03:04:c8:71:21:52:22:
21:01:57:13:d7:4d:d5:6d:21:d0:d3:73:85:4e:23:
6c:df:d4:7f:07:41:60:5a:dd:f6:2b:08:2c:cd:61:
08:75:ec:be:ea:16:4b:46:e3:49:b2:f1:9d:ce:db:
97:ac:54:55:78:08:52:a8:19:d8:d7:c7:6d:5b:fd:
6c:16:f1:89:56:34:05:0d:6c:53:96:43:12:26:71:
fb:a6:f2:73:6b:1b:a8:5b:3f:f6:b9:fd:1b:e5:4c:
dd:6e:85:5d:cb:b2:5c:02:20:80:51:15:54:f7:02:
a7:91:3c:04:ce:9a:04:b1:82:ff:e1:60:e7:7c:c6:
ff:d8:3e:e3:98:4f:31:b8:f3:3c:ac:f4:8d:3e:2a:
fb:32:eb:96:22:9b:fa:d3:b3:d8:66:15:0c:ac:c3:
56:a9:a3:0b:a5:ac:5f:60:fb:e0:a2:57:47:c8:60:
dc:6b:bd:66:41:be:74:66:c1:e6:23:89:b0:70:99:
35:87:db:48:62:0f:d0:a6:52:38:71:9e:7a:75:07:
5a:71:3b:d8:40:95:a8:c5:c9:14:46:3d:21:8f:2e:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:B8:0D:04:98:1E:69:B2:78:D8:9D:6E:0D:9F:D6:EE:02:C1:31
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:d4:7f:68:fe:dc:79:5c:b6:e1:6e:fe:33:ca:13:91:bd:
2e:02:d1:ab:7e:3e:0f:48:15:4f:3c:77:39:24:03:7e:e2:8e:
c6:28:a0:01:f6:ae:de:68:0b:99:7b:6b:ad:7e:4c:ea:f7:28:
68:9e:9d:6a:ad:d8:dc:0f:12:47:66:12:1a:a7:9b:30:26:39:
59:e7:7f:97:6d:08:a7:82:f3:3a:7b:ed:e4:b5:5f:9c:ab:0a:
bc:c7:96:fe:58:00:c9:f8:52:e6:8c:b1:f0:23:bd:0f:d0:7f:
3e:be:23:c0:9c:97:13:e6:26:b6:29:02:6c:aa:b7:91:dd:f9:
bf:39:3c:19:40:b9:04:2f:8e:31:b9:15:d5:c7:f7:de:3e:81:
54:42:87:40:c5:1e:13:5e:f5:20:e7:82:6e:ee:fb:46:de:ec:
63:78:8c:5b:dc:ba:b2:e3:ff:7c:ff:13:8e:24:70:62:dd:3f:
69:69:4a:64:53:1f:cf:9c:bb:48:b2:77:c5:8f:24:93:03:f4:
94:0f:0c:79:c5:ed:2b:93:01:c0:f6:22:18:b5:f9:02:a1:27:
99:27:a2:10:16:3f:f9:18:c8:e9:22:7f:81:45:d1:a6:d9:69:
7b:e9:29:be:72:37:c9:e3:f0:96:e4:c2:75:3c:e1:9c:5b:02:
b1:8e:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:04 2025 by rpki-client