Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: wL4XGteWymzXXPlav/7ADCTy+leER2k9NFr6UAsaYkk=
Subject key identifier: A9:06:AC:B0:80:0F:A1:A4:33:63:CB:AE:B3:60:1A:14:17:EB:38:00
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0199FEB4A6B78A9FF75F346D306C825B494E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0DCB
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: ECoqespK6vZXeCNnGdhdhu57K86Fe7t44ez9bOGP5yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a6:b7:8a:9f:f7:5f:34:6d:30:6c:82:5b:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=a906acb0800fa1a43363cbaeb3601a1417eb3800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bd:21:37:91:fe:a5:dc:f2:a1:4c:c6:36:f7:
96:8e:94:98:b9:d6:49:c7:d4:03:fb:c0:2a:49:eb:
a5:09:42:16:1d:42:84:3e:38:1a:03:8f:94:f5:bc:
cf:1b:bd:3e:e9:a2:12:cd:b4:f0:30:fc:1d:20:c0:
0a:b3:89:30:c4:4d:91:05:96:61:1b:04:c3:06:a5:
8d:0a:88:38:06:32:67:f4:0d:12:0e:3a:9d:df:cc:
e8:30:3a:06:bb:69:8f:2b:b5:6b:a9:9a:34:38:25:
3e:ac:4e:65:06:b1:b6:ea:c4:4c:6f:18:d1:86:f3:
d4:3a:88:02:4b:65:80:73:57:c2:ea:b7:49:d4:d2:
af:28:87:da:cc:59:ff:79:f3:e6:7a:52:53:2a:13:
c3:c0:21:f3:be:9b:eb:64:2c:4e:bc:c5:81:8c:5b:
87:60:0d:79:4d:83:e5:eb:d0:50:01:1d:f0:f3:b1:
d2:04:25:b0:f1:96:f1:1a:99:46:be:53:76:97:90:
ca:3d:16:28:ef:7c:c7:64:c1:72:8f:47:df:66:81:
92:04:a3:29:d4:ac:0a:8d:66:26:da:c7:31:97:8b:
84:3c:9a:89:33:a4:06:a4:c5:ea:0f:cf:37:7a:3b:
8c:e2:c8:19:d7:ff:56:43:6f:55:4b:a6:df:b1:69:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:AC:B0:80:0F:A1:A4:33:63:CB:AE:B3:60:1A:14:17:EB:38:00
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c2:3d:f7:37:41:3d:0b:f7:97:87:54:d1:f0:38:f8:5d:d3:
e5:33:5d:c6:0e:3f:4f:f7:9c:bb:62:18:60:08:42:75:2a:59:
48:d5:0c:af:27:72:ce:f2:7d:87:75:29:c9:64:41:ff:84:3d:
6e:77:01:4c:ce:94:c5:a2:c7:c6:3f:b9:06:de:44:d2:fb:e7:
d0:fc:23:49:67:8a:a0:b0:dc:7d:b6:b8:80:46:9f:d6:01:3d:
d5:66:bb:fb:8e:18:12:f5:bb:4f:ea:cd:e8:5d:ce:10:c1:36:
52:fc:3b:fe:80:69:d0:d5:4d:a8:29:76:75:09:4f:a7:c9:76:
2e:1c:bd:a9:1d:42:7f:61:ae:5e:66:d4:fd:51:a1:63:42:f7:
3a:e6:cd:6e:18:31:ea:e1:7b:49:97:a3:5f:1b:56:90:48:28:
f1:48:b4:ca:74:d2:d9:3f:41:0a:d5:cc:d9:af:cf:0d:57:3a:
41:42:72:cf:70:07:53:65:45:96:d0:d0:d1:90:10:61:da:66:
84:82:f3:cd:3d:a1:42:62:77:b8:d1:15:64:64:69:ea:ff:5a:
5f:79:cf:07:7f:3b:58:52:44:ae:5e:fb:78:fa:e0:8a:fa:41:
c5:6d:72:2b:3b:c3:59:2c:6b:02:de:7f:cc:e6:dd:99:b5:ad:
18:5f:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:21 2025 by rpki-client