Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: DXV4gXXM3xRHVBePvYJCZ2rvtQ9uJiR+uMtdaSapCZs=
Subject key identifier: C2:7B:2E:B0:60:29:F1:1C:A3:4D:0E:21:E4:E5:7E:1D:59:36:5A:50
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0199FCC6B1CC2ED908B416DD23A1158C4E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: wHQym/NyMneLVlgef+5DACMJaPJZ2GS6QsFj18fnMqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b1:cc:2e:d9:08:b4:16:dd:23:a1:15:8c:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=c27b2eb06029f11ca34d0e21e4e57e1d59365a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:28:d9:2b:9d:ba:f4:0e:35:6b:93:97:30:
2f:86:f8:dd:42:60:90:48:4f:ff:53:ca:1d:b4:e6:
24:02:30:3b:54:89:20:f4:54:5d:f3:6f:79:4d:73:
29:80:9c:79:dc:83:a0:06:73:34:73:66:80:5b:2e:
6c:76:ff:d1:0d:4b:b4:dc:c1:f1:50:6a:96:ec:60:
e0:00:0f:92:94:e7:3a:13:e3:29:e5:68:2f:ed:36:
24:94:69:b3:6f:35:4a:2a:cf:56:d9:2a:b0:55:23:
a6:7a:bf:e5:9f:3d:80:b8:de:b0:ca:51:b7:8a:37:
09:6b:b4:37:ae:f7:0c:3c:c8:e1:d5:e5:01:a6:06:
28:da:7e:19:55:61:61:9f:f5:2e:4f:46:c3:d2:2c:
f5:11:f3:b6:f1:6b:bf:64:f5:57:9f:b3:19:3e:b0:
c3:bf:64:42:90:5f:dd:4e:2f:f4:88:93:4e:d8:95:
6a:cb:e9:5b:9b:33:c0:d1:1b:6c:4c:b9:21:b5:f3:
40:a7:88:14:9a:cb:bb:64:34:db:09:72:fa:5f:cb:
6d:66:89:c0:8c:55:85:a5:21:7c:81:03:f0:85:53:
4c:d4:67:eb:3d:4b:a3:be:50:3b:23:d1:04:0f:bb:
2c:25:d0:2e:73:66:db:6e:eb:dc:de:84:32:de:dc:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:2E:B0:60:29:F1:1C:A3:4D:0E:21:E4:E5:7E:1D:59:36:5A:50
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:07:e3:7c:03:15:10:09:72:34:16:41:87:da:c4:29:84:
93:29:80:71:f2:fe:9c:2e:7f:e9:39:39:13:22:c5:2d:b9:69:
05:4f:14:01:ba:b5:be:55:fa:cd:d1:88:f5:64:b5:61:c5:56:
c3:8c:11:4b:ae:c3:06:48:7f:ee:55:83:40:a5:aa:76:55:94:
30:4b:77:8f:47:cb:e1:a8:01:f9:2b:ac:ec:1c:46:20:35:11:
9b:49:52:f8:31:b2:3a:ea:f7:3b:b6:5d:75:72:22:45:82:94:
14:27:c7:ec:ae:1b:a4:d7:ed:47:79:67:48:d3:e9:da:b0:c3:
dc:c2:63:da:9d:61:2a:48:53:00:cb:fb:36:c7:bf:0a:b0:44:
b6:d2:25:34:23:70:67:df:eb:6d:85:c7:14:fc:4a:ab:40:5b:
65:24:04:a1:14:45:4d:ce:ed:e6:39:71:29:ca:46:af:43:89:
ce:e7:da:86:c0:08:84:3b:51:21:80:2f:31:fd:2e:63:a1:23:
a1:06:08:e5:1f:14:3a:11:5c:38:5b:ac:32:7e:e3:c4:d6:ff:
e5:2a:9c:8e:ab:3f:bc:2c:3e:89:d1:22:26:f1:22:24:9c:68:
ce:f5:aa:51:84:09:e2:eb:bf:49:19:3b:58:19:91:e2:d7:0e:
88:ab:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:59 2025 by rpki-client