Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: Gt52tRDGxoyAxRXKQyKjCWQTcoLafC7ZsCyM5+03UHo=
Subject key identifier: 8E:EE:FC:82:9C:42:97:74:C4:1D:AF:32:24:C7:9C:32:C9:E9:8B:2E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 0199FF59A95A2A0F1E318A3E2126B99B3D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 03FD
Signing time: Mon 20 Oct 2025 02:01:30 +0000
Manifest this update: Mon 20 Oct 2025 02:01:30 +0000
Manifest next update: Tue 21 Oct 2025 02:01:30 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: 1rpz0msvpRzLv07tE0om7jby7qveu4Mvxt31XK3deyY=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a9:5a:2a:0f:1e:31:8a:3e:21:26:b9:9b:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Oct 20 02:01:30 2025 GMT
Not After : Oct 21 02:01:30 2025 GMT
Subject: CN=8eeefc829c429774c41daf3224c79c32c9e98b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:e0:9a:e2:e1:43:14:b9:c8:5d:54:a5:e8:
a3:db:c1:fe:3a:57:13:20:8b:64:8a:25:fe:ba:86:
92:24:0b:32:48:07:91:b4:77:fd:a5:91:32:e8:b2:
01:f4:87:0e:16:43:9d:b5:f9:08:c7:4f:ef:28:d9:
84:02:74:88:fe:1d:f9:71:e7:38:0d:c8:a8:1d:56:
7e:79:cc:ee:b7:5e:c6:3a:dd:ad:34:af:5a:ab:50:
f3:3c:71:2f:2f:fd:26:cf:fe:46:d9:db:b8:9d:3d:
3b:82:c0:50:51:63:12:11:fe:b9:d8:2e:92:79:4a:
b6:04:23:ef:bf:ca:c6:91:ca:f4:07:64:ce:f9:32:
c2:49:f0:8c:55:a5:ba:8a:65:32:c2:3e:9b:5c:52:
07:56:76:97:e5:39:03:cd:da:69:2b:61:5e:e0:f8:
92:f7:ab:99:ac:48:8c:7e:39:ed:7d:c5:b2:48:4b:
c6:34:6a:83:19:a0:11:29:54:03:33:02:56:55:86:
28:82:e9:12:87:83:10:fc:bb:d9:4f:ac:f0:0e:49:
84:64:48:50:f8:b0:f6:4a:67:88:57:18:46:5b:00:
dd:8c:f5:d5:da:df:ec:7f:33:f2:fa:72:4f:47:03:
07:a8:12:5d:6a:1f:12:c8:09:58:5d:59:d4:e4:cd:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:FC:82:9C:42:97:74:C4:1D:AF:32:24:C7:9C:32:C9:E9:8B:2E
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:21:62:c2:d7:a8:9d:45:58:f1:48:4d:01:b0:16:10:81:
bb:65:74:f5:a5:b9:ff:dc:ed:56:c1:1b:2a:e3:c8:49:f0:5b:
a0:e6:29:ea:2c:0b:f5:08:3a:3d:a0:db:a3:88:42:eb:42:d6:
57:65:bb:b6:8d:d0:d0:2f:bd:d3:93:de:be:c5:0e:6f:a4:be:
67:d8:64:e0:f8:68:fa:4f:bb:d2:45:5a:2b:f9:30:c0:b5:bd:
8f:12:13:7d:17:b3:5b:67:d5:5b:ef:3e:48:58:6c:cc:cb:c7:
2e:d2:f9:42:37:94:d3:8b:60:8a:9b:15:a6:b7:d4:32:28:77:
6a:62:f6:56:cb:59:89:ad:e2:d5:5a:9b:ef:eb:9b:8d:34:81:
c3:57:81:93:ec:27:71:b1:0a:ac:ed:3c:15:55:2c:32:ee:82:
64:72:14:74:c0:83:80:f8:48:be:ba:6c:60:d8:ce:6a:6e:a8:
a6:73:ca:da:3a:3a:15:e3:f9:6b:66:27:4a:ac:60:9c:13:bf:
ea:94:39:25:b9:f9:8d:f2:4f:ce:7a:f7:64:bd:4a:6c:67:8a:
6d:1e:15:75:bd:fa:5b:d4:0f:1d:e0:51:eb:64:61:9b:2d:39:
b6:80:21:f1:02:c7:91:b5:29:8d:f9:bf:49:c4:a3:76:0d:a2:
aa:44:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:25 2025 by rpki-client