Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: BEr1N5vmyDeftZ0Rs7Q2y0hAEPAvEGLH1YlQlSphQ/4=
Subject key identifier: 63:CA:A5:25:EB:C9:20:A2:23:7B:5A:3C:68:42:76:83:A4:4F:27:E6
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 0199FE7DDC0FF6FC54A04ACD244484DCBE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 068F
Signing time: Sun 19 Oct 2025 22:01:25 +0000
Manifest this update: Sun 19 Oct 2025 22:01:25 +0000
Manifest next update: Mon 20 Oct 2025 22:01:25 +0000
Files and hashes: 1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=)
2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: WdMpM6BCHrfALsDnOazhbSpx4H9mzLVjBqTLyWJfBTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:dc:0f:f6:fc:54:a0:4a:cd:24:44:84:dc:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Oct 19 22:01:25 2025 GMT
Not After : Oct 20 22:01:25 2025 GMT
Subject: CN=63caa525ebc920a2237b5a3c68427683a44f27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cf:59:b5:b7:ed:b3:ce:73:9c:d7:4a:07:61:
89:cb:ec:68:72:9a:83:77:4e:64:ee:5d:09:72:2e:
51:0e:0e:52:d6:4c:2d:4e:85:aa:32:aa:ae:bb:44:
f4:bf:1b:56:14:52:14:f2:f5:1d:cb:8f:1a:4f:d7:
92:74:8e:2b:14:0b:a8:96:01:b4:c8:e6:d6:1f:80:
8f:8e:e2:84:f4:9a:08:b6:07:f4:fa:03:6c:4e:d3:
f2:20:cd:ec:09:31:4e:4d:e4:c7:5e:36:fd:4a:f9:
97:7e:5f:93:9b:0d:2f:fa:0a:e0:5f:63:17:af:13:
8b:f7:da:d4:c1:be:88:84:bc:cc:eb:ca:f3:10:f6:
b1:da:a0:e8:23:e8:72:02:1b:97:5b:bd:da:32:73:
99:5a:17:25:31:af:72:d6:eb:8b:bc:8f:98:6c:43:
aa:c0:6e:cc:6a:48:8c:f9:6e:ff:63:ba:2a:6d:de:
64:b0:5c:2b:a9:4a:1c:ca:1a:5d:f4:c7:95:17:f5:
a3:b1:16:41:23:b3:a6:ef:f2:ec:a9:8a:fe:82:ad:
6a:b3:0e:ac:35:30:75:2e:cf:0b:b2:5d:da:34:5e:
b5:98:a5:28:22:80:50:05:6a:8e:d1:a3:c1:1a:13:
90:73:88:d1:c9:23:2f:a1:24:37:ab:54:f8:31:89:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:A5:25:EB:C9:20:A2:23:7B:5A:3C:68:42:76:83:A4:4F:27:E6
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1c:5c:e8:1e:3c:dd:ca:7a:05:69:5a:d0:a0:06:c9:4f:8b:
36:3e:1a:35:ae:2b:73:d9:a7:b9:af:a6:cf:4d:d1:2b:48:5c:
32:db:9d:f2:1e:36:dd:05:da:6e:d6:54:36:48:3b:26:ef:dc:
c6:e4:61:59:32:8f:e2:a2:35:5e:0c:f8:35:c7:4e:3d:67:c5:
aa:f8:ad:cd:d5:88:85:d1:46:8c:07:b2:dd:5b:5d:6b:ec:e0:
12:42:d3:99:9f:3b:21:f3:a9:62:77:14:82:c1:2b:64:8f:66:
9f:ee:6a:b6:f4:2b:1f:0f:1d:f1:de:b5:a3:4d:2d:cb:44:21:
2a:ae:b2:f8:93:02:a7:4d:f9:f1:7f:30:73:a6:8a:17:27:19:
c0:3c:f4:e3:73:7c:60:80:d3:0c:d8:f9:47:01:50:01:a8:be:
9e:e1:1f:f3:ea:e0:15:41:9a:f2:1d:9e:4e:d3:d7:86:9b:92:
47:5f:e7:7b:d9:c6:8b:a9:4d:28:fa:16:1d:3b:be:92:88:3b:
0f:ce:c9:4a:f3:8b:5f:e4:82:08:ed:2b:b1:09:e9:61:63:88:
a8:64:71:c8:84:43:06:4b:2b:82:df:ce:b3:cf:bb:99:a2:b4:
e9:d8:8f:7e:46:a4:7c:96:e3:3a:ba:7f:b3:a5:0c:83:aa:5b:
0c:72:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:21 2025 by rpki-client