Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: Z1hgviZ9onilHSj8i8O21BVj80WMkv9gak13+ZuAja0=
Subject key identifier: 5F:98:C7:CE:80:73:F2:B8:0F:A5:55:3A:43:00:91:D4:DA:2D:FC:EE
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 0199FEEBBC51057CA9B124FAAE6B0EFC8577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0B52
Signing time: Mon 20 Oct 2025 00:01:25 +0000
Manifest this update: Mon 20 Oct 2025 00:01:25 +0000
Manifest next update: Tue 21 Oct 2025 00:01:25 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: ZYS2nLWJMS3WO8UIJOvtXf2T6uxca44+QmB9rQhj7Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bc:51:05:7c:a9:b1:24:fa:ae:6b:0e:fc:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Oct 20 00:01:25 2025 GMT
Not After : Oct 21 00:01:25 2025 GMT
Subject: CN=5f98c7ce8073f2b80fa5553a430091d4da2dfcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:a8:b1:84:08:15:9a:26:bc:37:3e:c7:17:
6b:95:ef:71:3c:03:bf:a7:69:e4:c0:a0:42:08:3f:
b8:95:3b:e3:1a:59:de:bd:6b:72:7a:66:a7:37:c1:
98:d2:84:ca:83:a6:77:db:a6:af:85:18:97:83:0c:
bc:20:1a:bb:19:72:db:58:6f:7c:49:10:0d:ba:d2:
09:f0:fb:92:7d:70:19:cc:c1:79:6f:a7:97:00:dd:
f6:17:36:2d:8a:e4:a9:dc:ac:66:67:1a:15:f1:93:
6c:4c:ac:37:5c:3a:05:dc:77:04:e9:c6:16:5d:6c:
88:76:8b:7f:b3:f7:36:a1:fc:da:e5:78:83:57:f3:
62:5b:f8:23:01:86:f5:01:77:a7:97:44:29:c7:89:
74:69:7e:c7:8e:46:db:b5:25:2c:41:1b:2b:85:d6:
41:54:1a:45:88:e2:3e:1b:7e:c5:a2:66:a8:82:38:
34:d8:f3:09:c8:95:d0:c4:71:04:6d:e7:85:0e:39:
3d:81:de:de:8c:06:97:57:36:0d:c1:26:e4:64:0a:
34:f3:59:fc:62:46:8c:53:d5:b7:82:ae:d6:cc:2d:
aa:32:26:25:ff:24:ec:b6:ab:5c:89:36:4d:d1:e1:
6d:eb:f2:47:5d:99:17:cd:e5:75:e5:57:ff:4a:4e:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:98:C7:CE:80:73:F2:B8:0F:A5:55:3A:43:00:91:D4:DA:2D:FC:EE
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:15:f4:e3:9a:0a:5b:e6:1b:38:fd:de:14:31:c5:15:22:ef:
20:5f:71:2c:02:46:14:25:fc:32:56:c0:f0:fc:eb:48:de:05:
f5:e4:f7:0e:78:0a:33:43:53:9e:27:c9:fe:99:f3:e0:61:ef:
ee:09:a7:bb:43:be:1e:ea:da:7b:b7:6c:89:a7:85:a6:11:1f:
3e:8c:a7:71:0f:ba:5d:b5:31:9d:e8:37:c4:07:96:a0:35:b2:
7d:65:56:e2:ad:69:9f:3c:05:60:b0:e0:01:7c:50:59:ed:73:
8f:8e:39:3a:3b:ac:b6:5d:ca:59:1d:a0:7e:ba:e2:85:80:b4:
7f:77:5a:62:cf:23:55:11:62:3a:06:4b:b4:8c:0b:8f:ad:aa:
c1:d3:a2:11:e3:92:13:b2:98:bd:96:a1:8a:8f:c1:78:75:09:
a5:19:b3:69:13:5d:89:24:3c:54:bf:de:1d:df:54:9f:7c:b6:
63:8c:e8:26:a2:45:82:a1:5e:09:f0:b8:09:7e:3e:15:a7:9a:
3c:b8:e7:f8:f3:fd:d0:b4:d3:84:d9:51:60:d8:c4:ca:a3:f9:
18:8f:e3:19:f7:3d:b3:ae:15:52:17:e0:0c:d9:54:73:7d:db:
c5:4c:04:2b:de:c9:ed:61:0c:90:02:0c:f1:bd:60:43:1d:b5:
38:e8:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:36 2025 by rpki-client