Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: yjDvd9/yxNwWPD3z621b3+a7a1yBdRdEz/EJaljMeUg=
Subject key identifier: 29:E3:68:3E:5A:AC:F6:44:50:5C:E4:0A:BF:A2:D0:00:26:CC:35:0C
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 0199FCC649031326FDEA52F89712CC98F2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: 7cEIuSbYtW+VXbi6Pe6xV1pusHYS+6xBuOfn7GQVOhM=)
2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:49:03:13:26:fd:ea:52:f8:97:12:cc:98:f2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=29e3683e5aacf644505ce40abfa2d00026cc350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:1d:82:14:67:f9:7f:a3:c8:cf:d5:6b:8a:
72:bd:a5:c6:3f:7a:80:31:3d:66:45:6b:6b:eb:58:
8b:80:50:98:33:2f:85:8b:fe:f5:f5:0b:53:58:d0:
c0:0d:37:b0:db:2b:00:af:f7:59:6b:e3:b1:f1:a5:
9d:15:92:54:6e:41:31:cc:bd:1f:a4:59:d9:0a:20:
e2:02:8c:69:f4:20:9c:0f:60:51:ee:fb:3f:2a:a4:
3b:1c:e1:49:06:57:97:b1:24:74:19:4b:19:df:86:
ab:37:7b:e5:7f:71:10:3f:c6:ff:80:25:09:e6:ec:
3c:31:55:7f:8d:26:cb:14:de:6e:20:0e:02:64:35:
48:a9:b8:a2:4b:19:76:4d:9b:50:c2:57:0e:07:4c:
78:e6:ee:cd:35:dd:ae:2f:f2:8c:91:b5:47:63:91:
6d:67:e7:d4:a5:1e:0f:88:21:ff:8e:10:50:5e:90:
d5:f1:a9:8a:e4:11:e6:87:1b:8f:1f:f3:e9:e8:44:
9f:39:b1:1c:32:b2:19:89:de:89:5f:6c:0b:57:65:
ad:43:66:1f:21:98:52:73:e0:ae:09:96:18:bd:06:
31:64:b5:9b:be:e9:ed:f4:44:3d:da:7e:3b:26:4b:
54:7b:d2:52:5b:57:89:ee:97:38:0e:ab:9d:be:79:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:68:3E:5A:AC:F6:44:50:5C:E4:0A:BF:A2:D0:00:26:CC:35:0C
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fd:dc:6d:90:00:e3:85:ec:e7:ba:61:04:a0:bc:27:30:eb:
43:e6:34:52:b1:b3:5c:eb:32:00:c8:28:72:b8:c9:f6:d8:24:
1c:21:11:31:2d:41:22:bd:ca:0e:13:02:c6:e2:4f:0e:98:72:
13:11:10:9c:16:14:9e:f8:f9:d5:57:9d:92:4e:a5:6b:5f:a8:
6c:2c:d1:4e:52:f6:fc:e1:5f:f6:6c:0f:a6:91:6e:b1:e1:97:
86:36:be:3b:81:9f:9b:de:70:03:69:b8:1c:03:e1:a8:35:9d:
a3:cd:ca:00:80:09:aa:6c:1f:ef:90:c7:b9:5f:e4:53:19:c0:
ba:e1:2c:88:f7:c6:39:83:42:74:fa:fc:ac:de:85:f0:91:21:
34:53:55:4d:78:c1:63:e7:ed:64:7e:0b:81:f5:75:c7:78:c4:
16:e5:12:bb:df:5e:1a:a4:a3:98:36:e4:6d:fe:4f:7d:ca:80:
2e:a0:35:94:4c:4a:5c:62:31:f0:93:5e:3c:22:c2:d6:13:08:
01:5c:0c:53:28:a9:f1:99:95:03:14:0c:a3:60:37:f7:cf:bc:
b3:14:25:91:15:95:6b:86:a4:c3:04:7a:4d:c6:fc:68:92:0a:
8f:2c:f0:51:2e:64:eb:46:cc:d5:ba:43:1c:e1:46:cc:3e:34:
3c:96:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:08 2025 by rpki-client