Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: 3cGVE11NL2Ic+Bul3cOrI9+dFXfL9J3JrBEYo++k7E4=
Subject key identifier: B1:C4:1C:79:97:83:9A:56:D4:4E:A3:D8:4F:61:26:E2:B4:DC:96:0B
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 0199FE476038FA5EA07A377A70F5A7186082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 16B9
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: RkNSHPxeGyuQWaphLZeft9rG6t4.roa (hash: c7vEvcPCr8KpDOxbqsIVXnfktutvPBP6mswtibwiwTc=)
2: Yh__IxotubMeOa82sMvmQUaBHl8.roa (hash: E16zbGBIdZ2QaT6+6cP2+s5Eumca3TcRDTuXCjFf19A=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: nuAL6bbst+NPgh9vLA7EShnHaAx3NuGGuBjjJXMzUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:60:38:fa:5e:a0:7a:37:7a:70:f5:a7:18:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=b1c41c7997839a56d44ea3d84f6126e2b4dc960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:37:7c:8a:b2:50:a4:2a:2f:6d:71:a8:f5:
79:ac:40:1c:73:68:c0:5e:cd:76:82:84:c4:f9:19:
2f:04:b2:54:34:62:12:d9:1d:95:58:ef:f9:21:6b:
be:11:f1:fe:09:57:e1:e8:ac:eb:00:84:54:d9:2f:
fc:8f:f8:f0:67:b4:e8:57:8b:cd:00:53:48:c0:e5:
4b:f4:fb:0a:96:1d:71:e8:40:75:14:64:bf:67:9b:
c9:23:f7:99:ac:75:67:6b:10:34:86:c7:6c:c3:95:
62:ac:2c:97:fb:01:c4:bd:30:3e:96:b6:4c:49:0e:
64:82:1e:73:15:bb:08:9e:b1:fb:54:e3:39:7e:1b:
86:61:2b:d0:3d:08:7e:31:d7:87:87:4f:de:ce:b0:
87:b0:eb:92:20:41:f2:14:6e:db:42:52:ac:bb:b6:
cf:48:5c:89:c2:43:52:c0:22:de:4e:ef:47:46:63:
23:09:d9:52:60:2e:39:a6:70:1c:a3:b3:a7:02:8a:
f2:31:97:f3:14:af:7f:2a:83:5c:09:af:87:6f:e9:
29:d2:54:dc:c5:ac:ae:0b:6f:fb:54:7b:83:38:64:
e6:6b:13:62:a0:77:4e:11:dc:bf:a8:35:13:33:94:
a4:d5:45:12:b7:a7:d3:d7:83:74:97:ba:05:b1:fb:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:1C:79:97:83:9A:56:D4:4E:A3:D8:4F:61:26:E2:B4:DC:96:0B
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c2:e2:17:05:dd:65:1e:61:bb:6a:73:17:92:a6:8a:21:bb:
6a:58:7a:db:70:2b:0f:74:06:40:45:ef:94:f1:a5:6c:fb:53:
41:c2:c6:aa:e9:37:91:08:92:9f:b1:32:49:cb:b5:a7:33:b6:
25:09:d7:a6:d7:07:bb:25:25:c4:86:0c:0c:7b:3b:cc:0c:31:
5d:20:d6:d7:1c:40:b4:46:45:bf:cf:07:3d:51:30:f0:3b:43:
02:04:09:73:6b:3c:8b:cc:ba:4b:c7:9b:43:70:c8:71:f1:57:
55:e9:81:81:79:6b:37:3d:3c:6e:e2:27:17:4c:b7:5e:cf:be:
3f:8d:5b:4b:aa:b4:7e:37:cb:52:00:15:7c:16:ed:ad:46:41:
d3:eb:d7:3c:91:bb:3f:0d:82:e0:de:03:9e:09:b1:65:45:96:
84:94:07:e7:f3:11:ef:4f:70:63:df:78:74:40:96:78:f6:33:
c4:c1:be:ef:3c:b5:14:19:0a:95:b8:4a:f5:63:84:e5:0d:0c:
3d:89:3b:eb:23:b6:2e:65:ec:d4:7c:29:3b:07:7b:cc:3c:3c:
d6:24:e0:39:75:08:91:75:b6:5e:31:e2:e3:d5:3b:b9:d9:36:
20:87:13:1e:42:f2:e1:a9:49:ad:3e:d5:af:a9:63:7f:a9:6f:
e2:40:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:04 2025 by rpki-client