Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File: fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier: oHfnH8WpE/E2wf5aLRLksS/zvyJa3apmvkns8ma63Wo=
Subject key identifier: 0A:11:B0:65:47:89:F2:8D:E5:6B:DC:44:EB:5D:4A:2E:5A:77:01:DE
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 0199FCC60CC336956F4ACD77FBAB968AA993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number: 062B
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: Dt/ycGoWWMaWcakFV7Lc04lg1xp81yiNpMmZspjuYoQ=)
2: ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa (hash: cwXAi1sfFPfN04wsw1nczJfstzqjCt7igbtZqfyu1Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0c:c3:36:95:6f:4a:cd:77:fb:ab:96:8a:a9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=0a11b0654789f28de56bdc44eb5d4a2e5a7701de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:ff:b7:c7:3c:d3:b5:81:80:c4:cd:48:90:
9e:2c:c2:9e:04:8a:15:bf:8f:05:70:f1:91:18:4b:
4f:82:76:ae:06:71:8c:af:f2:cb:5b:24:b9:e2:58:
f5:a6:4d:bf:70:75:16:99:fb:46:2f:a7:fc:30:79:
67:cf:74:07:f8:dc:b9:da:7d:26:b1:90:f3:a5:25:
98:97:49:6f:d4:6e:57:b8:bd:99:22:fb:96:5a:49:
9f:c7:2c:43:91:2f:87:68:72:1c:42:22:0d:46:96:
14:8d:2f:bd:c7:b1:db:57:eb:43:09:60:03:8c:49:
22:42:88:6a:8d:86:0c:66:75:6d:af:0a:d7:f7:8b:
c6:59:35:3b:63:57:37:21:b3:20:30:81:dc:a8:2a:
a2:c9:df:0c:f3:88:c2:55:a6:4c:13:11:cb:12:c2:
05:d9:c2:41:5b:96:01:c7:5a:f8:38:95:c6:e4:e6:
e5:71:a0:ef:dd:4f:0c:66:bf:27:33:72:11:80:d8:
73:b1:f1:0a:4b:20:b8:d3:d6:08:0f:61:a5:20:b2:
2a:e6:dd:40:be:92:17:ed:bc:eb:87:08:ef:ee:48:
c3:f5:5c:1d:9a:81:54:43:ea:f0:d6:1b:46:14:d0:
6c:6b:48:c5:d8:fc:c5:c0:d9:c9:17:c1:a9:5e:5b:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:11:B0:65:47:89:F2:8D:E5:6B:DC:44:EB:5D:4A:2E:5A:77:01:DE
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:50:00:a9:89:89:3c:37:24:b7:c4:ca:97:f4:14:d9:1b:
5b:71:15:8d:d3:25:27:dd:8f:2d:1d:b2:d5:84:83:b1:1c:28:
9f:4a:c4:0f:6f:3a:af:30:ab:bf:d2:25:6d:d0:5b:ae:ba:f7:
91:98:c6:40:0e:db:eb:c0:ae:ab:5d:4d:e3:b3:c3:db:93:94:
89:8e:e8:26:83:f1:c5:97:ad:5b:2e:65:56:97:51:c9:9a:60:
e4:3e:23:84:65:19:87:9a:ff:2f:2d:3f:a6:51:b6:45:4b:f0:
c4:e5:04:4f:d6:e2:0f:c8:76:a6:c0:7c:ba:e6:24:aa:c7:85:
0a:27:50:f6:da:63:1a:8d:fa:f1:c4:99:5a:a1:e4:f5:4f:6e:
1f:9f:e5:d8:7b:5a:72:de:3f:53:99:ca:40:6e:6b:8e:fd:7c:
e2:6f:f1:60:45:e9:0d:b1:d6:28:85:3f:3b:b9:78:d9:ac:77:
b3:f1:73:dc:ff:2d:7e:15:83:85:3d:1e:16:66:5e:ca:34:ac:
00:f2:2d:da:ad:c3:cc:91:83:ea:c4:49:95:e2:68:3b:51:22:
00:c2:c5:d3:81:e5:10:e3:ba:9d:0d:25:9f:b6:04:28:8d:24:
c3:b9:cd:3f:fd:59:f4:14:b7:d9:ce:35:09:42:f5:11:16:87:
fc:e7:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:48 2025 by rpki-client