Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: CZjrcVdi9tJ+7ON751rMSYrP3qHBBOS4cZ2asjPXq3k=
Subject key identifier: D5:A4:63:10:78:F7:21:68:7E:77:1E:00:B4:9E:80:17:CA:E0:D9:3D
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 0199FD33FB2DC3639B72B1ADD0E941C1E42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: 8k4uJzwvD2amn7m8RJOj8PzZv/bauSBQTVW6L2P1GYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fb:2d:c3:63:9b:72:b1:ad:d0:e9:41:c1:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=d5a4631078f721687e771e00b49e8017cae0d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:4b:4b:f2:f1:04:7a:a5:a2:42:9c:1e:62:
9a:69:99:09:b1:0a:47:a7:18:04:41:67:91:5d:e2:
4d:cf:28:02:69:4d:61:86:88:44:57:0a:c1:86:88:
53:73:7b:56:e3:9f:78:6c:cc:5f:34:3e:c2:99:a5:
86:04:38:93:ba:aa:6d:d2:62:6a:2c:c5:3c:d8:52:
ec:93:fd:23:bd:5c:e7:50:74:8d:ed:b5:c8:b6:87:
45:af:f1:7e:ec:be:ba:8d:30:18:00:b8:45:a3:3d:
11:94:94:51:20:45:51:d9:66:79:7c:79:ad:f6:31:
d8:64:eb:a2:ac:b9:91:55:03:e8:b6:09:51:1e:05:
70:0b:7c:ec:9a:6d:7d:2a:e7:30:ab:8c:41:0e:dc:
35:a3:e0:b3:b2:e8:e2:3a:6a:7a:d4:1c:e2:ff:d9:
29:0f:87:f9:8a:e8:d3:41:8a:0b:2e:6e:3c:29:70:
27:d7:c4:cb:5a:c2:a2:43:82:da:40:52:c9:36:85:
8e:89:09:8f:20:b4:2f:ab:37:e8:f1:cb:11:d2:40:
48:79:34:f3:30:9a:5c:74:73:b5:59:26:2a:66:ed:
d9:11:36:84:1c:37:3f:40:83:6d:64:3b:fe:20:a3:
f5:9e:9a:66:9b:e5:07:ce:d5:5a:68:2d:84:19:29:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:63:10:78:F7:21:68:7E:77:1E:00:B4:9E:80:17:CA:E0:D9:3D
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:83:d4:ef:dd:72:b8:06:dc:fb:98:92:69:42:1a:4c:ee:
df:42:8c:df:91:28:6e:10:fb:03:85:19:70:a1:27:bc:21:ff:
b3:15:7e:2f:b7:e7:49:a7:1b:ed:46:de:3a:9b:87:47:76:4a:
a5:ce:64:e9:f2:48:ed:01:52:ad:b3:c0:11:8b:54:77:86:d2:
e1:0b:4e:17:14:a4:76:34:75:f5:d6:2a:24:e9:3d:6c:b8:d7:
b2:52:f5:1a:af:3e:db:cb:b6:c1:0c:0c:8e:45:15:d3:e9:cb:
a0:4e:a7:59:f0:dd:13:94:d2:ef:4d:e2:f9:fa:d3:d8:47:c4:
2e:f4:e2:bc:af:e4:6a:a4:7d:f7:78:ae:d1:86:fa:d8:ae:04:
d4:b9:a6:4d:b7:b6:9b:d3:21:ee:60:18:8a:5f:8b:b4:41:4d:
7b:5d:4d:25:64:11:73:27:92:0b:4d:47:0d:91:73:80:c0:e3:
8d:0d:b6:88:a6:8e:ff:ee:ab:03:61:47:b6:29:47:25:b1:ee:
e9:57:24:31:4f:a7:8c:33:33:75:a0:3c:8c:09:80:0c:48:9d:
90:f3:50:94:41:7c:66:70:4f:9f:ac:69:62:47:ad:64:c6:5c:
9e:01:3c:26:42:83:ed:36:1d:9e:af:6e:96:06:bb:c1:d9:e8:
f7:02:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:59 2025 by rpki-client