Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: 25FdXF9zQjDzRvdFYsViWzbxWSugqwewQjij/zPcExs=
Subject key identifier: B7:25:2B:60:97:8F:C9:08:82:12:20:BE:44:51:6F:7D:CE:BE:17:65
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 0199FC8F64BC836B4E8F119BEB3688A01809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 0673
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: H6qDMROSjvZ4t1QsA8KEJfyVO8R6pRrguG+ok+MWxfw=)
2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:64:bc:83:6b:4e:8f:11:9b:eb:36:88:a0:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=b7252b60978fc908821220be44516f7dcebe1765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:e6:e5:f0:93:35:fe:4a:52:a0:1b:9b:0d:
b2:04:05:8d:30:15:38:ed:e6:a1:af:10:86:db:f6:
60:0a:59:2c:db:6f:db:d7:c8:69:fc:67:49:7e:85:
4e:3b:d9:bb:c8:75:66:ba:5b:b2:fd:11:9b:8f:5e:
0a:92:20:09:e2:35:15:00:99:6b:c4:3c:b7:66:01:
4e:b9:e8:7f:83:7f:84:1f:53:12:29:c1:3c:a6:fa:
ae:e1:d5:70:d7:5c:c5:33:48:39:75:7d:46:04:1a:
34:a3:1c:81:66:0f:4e:2a:d4:28:3c:1d:e8:6a:45:
bf:9d:9a:48:5e:a2:22:71:2e:7a:c8:3e:e6:e4:d4:
4b:d6:07:c8:be:02:84:0b:64:74:d8:b1:45:4d:83:
b4:9d:19:6f:de:23:b1:65:d6:48:92:76:2b:76:21:
eb:5d:32:3b:48:b5:dd:f6:89:f6:9b:7c:83:c2:d5:
b5:5f:96:25:bd:a2:63:0f:44:37:68:e2:2d:78:29:
fa:ef:6a:4b:2b:bd:fb:ea:0f:12:ff:f9:b2:0e:36:
04:9d:2c:80:27:8b:28:3c:95:e7:15:46:a1:e0:dd:
a1:23:f7:03:44:06:2d:4b:64:cc:94:71:aa:51:6c:
70:0c:b1:42:7a:f4:cb:02:dd:4e:2c:92:ab:e1:4c:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:2B:60:97:8F:C9:08:82:12:20:BE:44:51:6F:7D:CE:BE:17:65
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:e3:0f:e0:81:e5:50:50:a6:f6:45:9d:5b:f2:68:e5:c5:
90:e3:2b:b8:48:b1:cf:9b:43:25:19:da:22:22:11:e1:52:80:
33:f2:85:1d:25:09:3a:12:cc:f1:d3:2a:73:69:b1:77:84:9f:
97:d7:d6:fc:ee:6d:ce:7d:b2:9c:b0:5d:02:0c:04:c6:27:ca:
7a:6a:d7:ec:e2:1c:71:b2:b8:e1:b0:4a:10:43:b8:b0:e3:2c:
7e:15:45:80:e3:f1:73:bf:e2:8b:7a:d1:03:73:9e:89:86:e3:
90:07:92:6e:05:d6:ea:f3:7f:bb:06:68:9d:7d:36:a3:b2:78:
f7:30:b3:11:db:0d:d7:a7:ee:e0:a3:2e:70:b0:03:39:0f:ad:
f3:58:1c:6d:5c:c3:91:4f:d4:bc:27:5a:00:b2:ad:02:21:94:
9a:e2:62:fb:f2:e3:48:97:c9:b6:91:03:2f:72:34:e3:a7:a9:
52:dd:cc:92:86:19:c1:f4:75:34:de:96:c8:1b:04:6a:cf:41:
8a:fd:d3:83:8a:94:3e:16:d8:60:39:88:a3:e7:f4:65:0b:87:
da:12:af:df:1d:3e:bf:21:1f:fb:a9:86:9f:73:58:30:c1:44:
17:58:b5:71:7f:9c:cd:48:ca:fd:6a:81:10:40:82:cc:eb:03:
75:fd:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:08 2025 by rpki-client