Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: qkZbWCnb8cuH2JIqf6G7BsUNxaSdNd7cwPQb7NLOqPk=
Subject key identifier: 25:E2:92:25:F1:14:84:C8:66:49:3A:CB:95:40:BE:B5:58:86:70:6E
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 0199FDA1D5593D4EE843CB461C4F2BA56163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: CB
Signing time: Sun 19 Oct 2025 18:01:05 +0000
Manifest this update: Sun 19 Oct 2025 18:01:05 +0000
Manifest next update: Mon 20 Oct 2025 18:01:05 +0000
Files and hashes: 1: MXRadGpzqEbp0mkxJfqHUigmWBA.roa (hash: wm6CRKGDQ4Q1PS4u4levZbaZ8tcUlI9RmOi9JQKCpTM=)
2: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: TetimB1kTwRwsQ4mO2BXFzJ2CAR8ee6YUt1Rl0UZ9TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d5:59:3d:4e:e8:43:cb:46:1c:4f:2b:a5:61:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Oct 19 18:01:05 2025 GMT
Not After : Oct 20 18:01:05 2025 GMT
Subject: CN=25e29225f11484c866493acb9540beb55886706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:35:18:46:8d:d8:22:a5:4c:18:70:ec:6e:
1e:cd:b1:1c:cf:ce:2f:24:f8:0b:04:93:8a:80:8a:
f5:a7:1e:1d:9a:0f:1f:90:36:5c:04:d7:96:50:d5:
cf:f7:ea:9b:c9:2e:5b:42:71:7d:e3:d5:87:4c:cd:
f1:ed:4e:bd:a9:36:e1:38:79:86:c5:7f:30:37:a8:
d7:3a:74:7e:d4:f0:fe:d2:58:90:07:18:c7:7a:3a:
96:1d:6f:bf:40:6a:b8:db:22:39:b3:3d:98:80:a0:
2a:fe:2b:58:e4:d9:a6:9a:05:28:2b:bc:00:48:ac:
c2:f1:39:77:18:b3:ea:50:03:05:df:68:04:90:48:
cc:87:da:82:38:28:f9:96:88:a2:8f:b6:81:b9:5e:
8f:3d:92:cd:b9:38:36:2b:01:11:f8:af:b9:2a:ae:
16:7a:98:87:a8:76:6d:1d:fc:d0:f2:e1:c2:5c:7b:
24:a4:2b:24:40:c8:28:11:92:29:53:e5:33:be:0e:
4b:98:13:6b:ae:ee:f4:72:93:7d:a0:a1:e0:2c:94:
ed:c0:67:ea:e5:f9:11:9b:04:96:82:83:f0:24:65:
ed:10:47:4d:44:4d:52:ef:33:6b:40:5e:5e:e3:f8:
dc:78:2d:48:39:b5:e2:b4:af:96:08:77:a2:7a:e6:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E2:92:25:F1:14:84:C8:66:49:3A:CB:95:40:BE:B5:58:86:70:6E
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:0f:ec:fc:89:c5:4f:0f:b0:c2:89:6f:82:57:34:ff:82:
e7:85:97:f4:8f:15:f8:5f:74:26:b9:3c:42:cf:83:46:e2:90:
36:ac:f1:c0:f4:e3:02:e9:93:57:4a:b6:39:31:fd:e0:e0:17:
4b:81:2f:45:81:ec:07:3e:70:70:26:56:9a:49:f2:04:90:80:
40:94:f5:17:aa:8d:55:87:d4:d6:d3:5c:be:e9:e9:c2:f5:38:
e5:9b:42:98:f5:05:0e:0a:ee:94:be:ba:ce:db:f1:54:4d:4b:
a0:96:20:5d:6b:3d:52:44:c8:32:50:dd:d7:10:b8:c4:31:fd:
c1:67:27:f2:0c:0c:90:bb:06:d4:50:26:04:3e:44:b8:6a:17:
86:94:c0:39:bb:19:81:e4:7c:6d:c0:ea:29:53:27:4a:5f:2c:
d3:ae:bb:66:73:05:6f:f9:ac:a1:4b:bd:63:5b:48:6f:3d:81:
fd:58:89:b5:08:93:76:d5:4f:90:b2:6f:07:9a:58:f4:99:7f:
cf:97:15:eb:56:64:6a:96:a3:10:4c:3b:7c:49:ae:1f:bd:a3:
8d:b9:8f:01:1b:a4:2e:9f:2c:e4:e3:2b:e2:99:37:0a:5b:51:
ae:9a:5e:c3:cb:05:99:2a:60:44:0b:60:3c:37:02:5f:22:b2:
bc:99:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:16 2025 by rpki-client