Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: Sb+FG3YQTomhsnKiNKsLdvrRRtspMMwyzWPWNk2hk1M=
Subject key identifier: 13:A4:C0:8B:B2:75:22:13:52:E9:A6:63:81:2F:D6:B5:4F:B1:8A:89
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 0199FB45B4267EF054830238EB0DB93EB3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 0107
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=)
2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: quhfSYwX1wS2vJmoYbze7GpcNygDt4LLeTXA1Gv0vFs=)
3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b4:26:7e:f0:54:83:02:38:eb:0d:b9:3e:b3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=13a4c08bb275221352e9a663812fd6b54fb18a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:72:6f:d7:bf:fa:ea:74:e1:47:b1:7e:68:
68:cd:b0:1a:1c:e7:a2:3a:ee:39:6f:e5:86:84:59:
08:83:4e:68:f3:72:c9:0e:8e:be:23:17:19:bf:6f:
cd:8c:c8:68:b7:ce:af:77:3a:43:6e:79:4b:5f:0e:
9b:5c:66:c9:65:65:bc:4c:43:16:b7:3a:f5:1f:ef:
32:ef:af:ae:bf:da:57:b5:d0:24:e4:94:3a:f4:0d:
c7:f7:43:13:63:d9:9d:92:ea:f0:fb:46:57:cd:b9:
7f:86:f5:ae:2a:37:97:f3:38:f6:4f:ba:4a:53:dd:
d2:40:f0:07:ba:03:da:86:c7:b3:95:83:56:67:a3:
09:d4:98:a1:2c:71:36:54:32:2f:8b:2d:8a:ad:a8:
3c:ff:4f:c9:e0:9e:78:b3:cc:2b:0a:a2:d4:89:ee:
a1:0e:5b:a5:c9:65:15:87:96:03:70:00:fb:d5:27:
c7:db:70:cd:c4:e8:b1:a2:4c:d0:cc:4f:98:38:90:
84:56:04:55:88:68:df:5a:72:f6:76:53:72:10:b3:
5d:30:e7:b9:db:be:5c:18:ae:76:1e:9d:10:bc:c1:
7e:0a:c1:49:da:ef:0e:8d:17:bd:14:63:e9:95:c4:
50:64:31:20:cd:12:47:11:ac:71:50:c2:b0:97:2a:
26:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:C0:8B:B2:75:22:13:52:E9:A6:63:81:2F:D6:B5:4F:B1:8A:89
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:66:e5:70:44:8b:17:c3:51:6a:a3:3f:0f:8b:78:04:30:94:
bb:cb:c9:fd:be:23:2a:77:a4:4d:31:ac:53:6e:56:dc:bd:72:
e5:41:d3:30:bf:1d:a5:b1:1b:e4:38:9a:16:e9:a6:ab:e6:6b:
06:5c:da:75:7e:f0:b2:c2:ff:74:3c:45:c3:15:a2:04:89:5d:
71:1a:d7:a5:82:9e:b8:8c:b0:13:cc:12:0f:c2:04:42:66:1a:
35:75:32:e4:f3:20:4b:9f:b2:42:5e:20:a6:4c:02:c3:76:3b:
5a:00:00:23:26:08:0b:58:a2:25:2f:bd:c0:fd:ea:ef:b1:3b:
b1:ae:86:14:22:3d:a3:ec:48:30:9f:64:2b:9a:16:d6:67:8a:
c6:a2:1f:c9:b3:14:15:61:cc:a7:42:9b:27:f8:af:90:18:0f:
2c:21:ab:64:6d:62:c1:90:1e:ad:c1:4c:0c:d6:ca:36:bb:8f:
68:c5:0c:80:97:4c:4e:60:e3:8f:95:df:b0:e0:3c:ee:33:9f:
66:05:c2:6c:95:1f:ed:5a:32:57:f5:55:e3:60:e4:2f:59:a1:
84:c2:75:88:fa:77:8e:fb:b4:87:e2:7c:58:09:a4:38:73:9d:
29:e2:07:d5:74:a5:b3:8c:72:74:9d:31:5e:ac:83:78:a7:a1:
42:86:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:50 2025 by rpki-client