Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: pkLGImZMQAp9+U7+EoIwR/qZ3eCn1TNBGTYOAR/uww0=
Subject key identifier: 2A:75:CA:B4:D6:E3:8B:73:D6:52:F8:3A:74:5F:51:C8:6F:52:D6:8E
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 0199FEB4C67FBC0B66134B23532F2BDF8206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: CB
Signing time: Sun 19 Oct 2025 23:01:24 +0000
Manifest this update: Sun 19 Oct 2025 23:01:24 +0000
Manifest next update: Mon 20 Oct 2025 23:01:24 +0000
Files and hashes: 1: OILyzQ2UmvS21gSFd565SbxH7mA.roa (hash: 9fyLmCcJiT605kvUMhZI3DGLYcwb/Ju1g++2lmYXkfY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: 40/TxlBvzZjs0EyGUUJNWPytld819/P0udsBLT5CRSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c6:7f:bc:0b:66:13:4b:23:53:2f:2b:df:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Oct 19 23:01:24 2025 GMT
Not After : Oct 20 23:01:24 2025 GMT
Subject: CN=2a75cab4d6e38b73d652f83a745f51c86f52d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:b3:77:a4:cc:72:54:4e:36:22:d5:df:e6:
08:a6:63:6e:be:15:fe:3c:94:cf:df:54:5d:1e:20:
2d:4b:c2:ad:82:07:12:b2:a9:f2:4e:00:17:08:bf:
fb:64:52:18:bb:5e:28:50:bd:16:82:5d:c3:30:76:
a8:4c:ef:c7:b1:c5:33:ed:17:97:0d:e0:71:f5:2d:
ba:9e:83:86:a6:b8:15:19:c1:00:ea:e6:ad:f7:29:
f6:31:2a:48:81:ea:98:17:7a:e4:61:b7:67:19:ee:
38:58:6b:03:1d:8c:f2:c3:9f:2f:28:ed:0f:50:26:
87:db:af:73:2b:bf:f7:5b:6d:bb:89:4b:d4:74:a5:
e7:f8:b8:ae:bd:9d:0f:4d:d2:7f:bd:79:9d:ac:8c:
bb:0e:d9:c8:c5:20:a8:ea:10:57:40:e3:ea:40:d6:
9f:07:67:81:01:62:77:fb:5a:e1:d5:e0:70:b5:16:
ef:55:b3:ac:15:e8:a8:07:99:ac:1c:38:3b:30:c5:
31:ff:1c:2e:bd:51:c9:2e:73:82:0e:d8:b9:06:9f:
1e:0e:54:5e:71:02:31:40:8c:c1:87:d3:b6:84:35:
3a:f5:d7:f4:81:b6:43:21:70:44:9f:85:ae:df:78:
53:b5:83:ed:ef:e6:48:a0:2e:98:c6:d6:44:c9:7c:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:CA:B4:D6:E3:8B:73:D6:52:F8:3A:74:5F:51:C8:6F:52:D6:8E
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ca:47:99:4f:0b:a5:90:60:af:ad:ec:c2:af:b5:da:f5:d6:
3d:a7:bb:f2:a6:20:36:bd:08:bf:75:d3:f7:06:5e:4a:4c:5f:
88:b4:84:ed:07:ca:e1:c0:8f:d7:d8:75:2e:92:25:a4:1a:47:
9f:97:f1:71:c6:8d:76:f2:e8:4d:f5:b4:bc:dd:c2:17:6d:9f:
4e:58:8b:6a:5a:b4:85:2d:fd:de:09:a3:f7:8f:32:c6:a4:52:
9a:55:28:66:02:5c:46:c7:8a:2e:49:3d:0b:0c:0a:22:35:4b:
0b:13:50:3d:5d:73:83:9e:9d:e8:81:81:6b:ee:f0:fb:3e:c0:
c1:fa:8e:dd:38:06:e0:65:46:8a:d8:0a:ca:6b:27:fa:2d:5f:
7a:9b:cb:48:50:62:a3:45:ff:95:a2:45:b1:0b:06:f3:6b:18:
2a:6c:3c:af:3b:64:21:15:8d:b5:51:34:dd:c0:bc:07:68:62:
4c:4a:00:d6:39:85:48:16:1e:25:46:7b:65:4d:7f:7d:76:ed:
5d:68:d5:ca:cd:4a:45:14:4e:93:78:12:e5:20:ae:19:36:e0:
44:86:e1:73:0e:0d:15:cf:76:d5:c1:1c:e4:d3:77:79:71:a1:
2c:7a:ac:b4:20:ed:80:91:4f:08:be:9f:67:bc:3f:34:b5:45:
ea:d1:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:29 2025 by rpki-client