Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: yvTEU9V52VsLjdX4RYVqFA32axxZkwQXlqpWTpc7kY0=
Subject key identifier: 74:65:85:1A:76:AD:F5:EF:7C:AB:AF:44:AB:15:7F:8F:9F:4E:69:E5
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0199FBEAAC7C26F66C5C942609B1D82F2C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: 5jeeYl/HqiInJ1tx3b8AntjpVgKY4pz/GBmwOSOHHAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ac:7c:26:f6:6c:5c:94:26:09:b1:d8:2f:2c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=7465851a76adf5ef7cabaf44ab157f8f9f4e69e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:cc:5c:12:c0:52:a2:6c:c5:3f:0c:42:32:
d9:54:8c:37:d1:04:55:61:c3:e3:97:ea:c5:b9:10:
fc:75:ed:00:19:05:0d:dc:38:48:6b:77:1b:c3:f9:
d2:3a:4d:0d:4d:75:0d:49:d3:d4:67:74:b3:a8:e7:
81:66:f4:a0:13:6f:78:1e:f1:99:a1:8a:cc:bb:cb:
d6:29:bf:fa:ad:44:d4:1a:3b:ec:d9:d6:76:4e:6b:
91:47:8d:af:b2:8a:f8:26:fd:48:2b:d9:fe:70:68:
32:0e:17:00:47:19:a0:9e:30:32:39:ea:6f:cc:66:
4d:a0:7a:0b:c6:f7:8d:c3:89:9b:da:93:7e:dc:27:
60:95:e8:15:78:a6:f0:7d:25:11:e4:81:18:3d:d2:
dc:d1:13:93:a8:df:94:ad:71:ed:38:a2:b0:2c:ad:
7f:b6:f5:03:09:0e:32:5a:41:62:72:7b:59:9f:0e:
fd:ac:fc:f9:84:07:1e:d3:b9:63:a7:98:66:9e:7d:
5e:3e:c1:36:c0:d9:bf:e1:64:3b:8e:f0:14:59:5d:
fe:50:4e:c2:03:62:8b:7a:0e:0c:14:2b:8c:dd:cf:
f9:86:66:c9:6a:19:02:41:42:b0:fc:42:78:61:c4:
25:9b:e1:9d:1c:7f:c8:99:7a:4d:c6:bc:95:a0:71:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:85:1A:76:AD:F5:EF:7C:AB:AF:44:AB:15:7F:8F:9F:4E:69:E5
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6b:07:02:cc:89:d2:c8:c6:a8:3a:3f:83:3f:2e:5a:e5:f1:
09:41:38:3f:8e:55:e7:15:00:8f:61:47:d4:46:79:a3:92:d7:
16:f9:11:74:be:7a:1b:9c:ac:e7:2b:9c:45:4f:c4:0c:9e:11:
f3:00:bc:20:05:b8:37:29:56:54:33:49:4f:24:11:d3:e4:e3:
2a:33:01:30:d1:e5:17:c7:84:85:b3:60:53:b2:c8:11:3e:32:
36:9a:dc:b9:b0:20:6b:d4:e8:37:74:03:23:f6:3f:4e:19:65:
e4:cd:7f:46:18:fe:31:f8:39:f6:9e:13:60:60:b3:36:81:65:
e9:d6:e8:45:c6:ed:bc:a7:34:62:f5:7a:14:1d:d5:1b:5c:45:
3b:0a:7c:91:ff:19:57:29:10:c9:c6:91:a5:99:5b:8f:8d:fe:
a4:4a:d7:3a:bb:80:cd:7a:e9:bd:ac:5a:00:7e:66:d4:7e:9d:
55:4a:1d:21:7d:3d:69:53:c4:d1:c3:34:e2:90:15:cb:9b:d9:
f8:07:32:f3:dd:a7:0a:0b:e5:fa:cd:1a:0e:90:21:49:8c:29:
c4:35:a8:b9:45:b4:92:34:ac:4a:0b:b1:59:13:4c:01:8e:c7:
2e:b3:ab:d4:58:f5:d0:e8:42:5e:be:18:08:0f:83:cb:fd:fc:
6a:f4:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:52 2025 by rpki-client