Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: vpimexYI6wn5vMpOT07ooU4ANADQh5avcYat26VI9Yo=
Subject key identifier: 60:AE:B8:E0:B6:1C:6B:1B:19:AE:8B:58:89:80:55:84:33:11:14:76
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 0199FB45BEDDE2563BAD1550D6EC4483B0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: wmaGfLQ1bA5EZ5zCSb5ZXcjjurpfxqCgEv8LRWNXYbQ=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:be:dd:e2:56:3b:ad:15:50:d6:ec:44:83:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=60aeb8e0b61c6b1b19ae8b588980558433111476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:40:02:b8:e7:8e:63:8b:34:79:3d:ef:ea:
37:e6:78:00:d5:92:a8:14:a8:0e:18:f7:d4:06:cf:
d2:d8:b2:7d:93:bd:c6:9b:d6:48:2e:b1:ea:6a:d9:
fd:bb:d5:b9:ff:d0:4a:25:93:a7:55:34:c4:d9:13:
48:35:3a:58:42:8c:08:fe:d3:52:bd:11:c4:f3:31:
96:e4:5e:38:b2:8c:0c:01:38:17:4c:c6:f9:32:8f:
98:13:eb:14:df:82:7b:b5:72:0b:5b:85:cc:38:ad:
07:9f:9b:4a:37:af:1c:99:70:58:31:b4:c7:32:3c:
4d:40:56:fe:18:57:3e:02:49:d5:52:03:bf:d2:dd:
25:7c:ac:65:6a:39:f2:9a:fd:a7:22:75:a5:24:3f:
55:65:58:a4:22:c7:04:d8:16:08:06:1b:51:7d:fb:
29:1c:f9:2c:dd:f7:49:57:1b:01:4b:22:6d:bd:ef:
aa:f2:57:e6:79:1e:ce:07:a6:24:5c:8d:78:ea:05:
72:08:d5:a7:f0:5a:29:e0:87:ab:be:84:97:b0:cf:
db:dc:05:af:9e:8f:0f:7a:40:87:e3:4a:bc:64:f0:
c1:75:d6:ab:8e:3e:67:ea:30:57:eb:19:64:0a:c3:
e0:73:a1:94:76:bd:bf:49:0f:a8:39:0a:73:aa:62:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:B8:E0:B6:1C:6B:1B:19:AE:8B:58:89:80:55:84:33:11:14:76
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:40:7e:da:03:25:4f:da:c5:b2:f3:d8:1f:25:5e:17:3e:b0:
e3:f1:17:fa:1a:c4:76:40:4f:7f:11:8f:6b:4e:4a:65:9e:2b:
35:0b:f9:7a:9c:21:68:cd:b8:4b:a1:00:af:61:dd:9e:ae:fd:
9a:a7:51:74:8b:04:af:07:73:3a:f0:b2:e8:48:7d:1c:1f:a7:
87:2b:fa:ef:ed:6e:29:a8:83:0c:81:3d:e0:0d:7e:32:40:47:
24:db:a8:e1:83:9f:2c:79:89:05:4a:33:b0:f8:a0:f5:85:66:
5b:81:07:5f:db:62:21:9e:e4:da:c7:59:99:65:bb:5e:60:6c:
4e:95:b3:ef:d8:0f:bc:80:22:02:da:e6:61:8d:4e:25:b6:f3:
8a:87:c4:61:8b:f6:50:72:ab:f1:c5:99:c1:e1:cd:a1:7c:15:
af:b3:28:5a:5a:dd:d7:89:88:54:ee:65:98:05:39:8c:58:16:
c7:f7:b6:65:33:b5:07:37:89:c5:a8:03:9b:db:7e:87:e1:92:
e5:e4:f3:94:72:eb:46:6c:d8:9f:71:cf:da:97:66:cc:ac:cf:
fd:26:45:36:a1:8d:12:56:83:8a:07:79:28:03:30:2f:95:f1:
dc:92:76:cd:e2:6f:17:96:6f:15:f6:bb:e2:46:2b:0e:33:dd:
e2:20:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:42 2025 by rpki-client