Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: /AsZu4jgEUrq/uLJ9lf3Xm/SZju9s92fwdqPHVq4llk=
Subject key identifier: B8:A3:1E:5A:28:9B:DF:32:86:13:C9:2D:DE:E3:37:51:B4:CF:AB:7E
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 0199FB0F0FB1E610E1DDF69C8197FD77863B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0D06
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: zQL6kUDqT3qcf16twfH+jnu7nLXDWEs+ultenWpj03M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0f:b1:e6:10:e1:dd:f6:9c:81:97:fd:77:86:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=b8a31e5a289bdf328613c92ddee33751b4cfab7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:66:ee:65:19:32:06:d3:60:c7:89:71:22:
7f:e2:85:1a:96:08:77:6f:cb:d3:fa:53:a4:65:fb:
25:8a:a3:a0:9f:ec:f0:42:0c:5c:6f:62:cb:a6:66:
34:a3:18:6c:f2:30:a7:60:2b:d0:b4:fe:5a:cc:09:
db:0d:da:0d:e0:d3:8c:46:3a:36:5a:a9:04:32:62:
c5:c1:73:e5:b1:85:6d:f7:52:d2:3a:92:43:9c:4d:
87:af:0f:f8:e3:41:ae:ac:5b:a1:40:9c:c7:8b:fc:
55:0f:5c:9a:9d:95:15:a6:22:82:a1:c9:5c:d1:62:
8e:b2:79:08:4f:65:15:8a:ee:e9:c1:57:15:cf:3c:
38:06:2f:ac:5e:68:48:3e:a7:33:1b:a7:0e:08:86:
65:65:39:a2:8c:df:86:f2:fe:9c:f1:f4:cc:f4:4b:
45:6b:28:20:be:94:53:f6:7a:d3:cb:60:a8:dd:e3:
b8:0d:8c:56:71:af:52:46:3d:5d:d4:7a:77:a8:d4:
b8:a6:dc:4d:b0:ae:3b:4e:d1:44:14:5e:6c:2e:d4:
f2:3f:63:5e:73:79:fb:1f:8e:94:c3:9b:63:ff:87:
3e:c5:97:a6:48:37:99:b2:b0:7e:d4:df:7d:d0:82:
f5:f2:e6:33:2d:98:73:ff:e6:5c:48:7a:19:2e:6e:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:1E:5A:28:9B:DF:32:86:13:C9:2D:DE:E3:37:51:B4:CF:AB:7E
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:22:a8:01:9d:2f:f5:d6:51:7c:a3:4a:7f:45:54:3c:87:
e1:81:76:67:12:06:02:aa:23:95:b2:18:f9:74:36:a3:19:87:
e4:00:58:1f:e4:e6:94:71:2f:cf:a8:6f:aa:a8:bf:da:ec:2a:
c9:97:47:5f:79:d4:83:a0:66:71:b1:ef:85:68:f1:23:74:f2:
ff:f2:8b:e4:8a:31:9f:02:1e:7a:07:51:54:a5:60:fd:81:46:
aa:7f:6b:bc:4a:e8:8a:b7:76:3e:79:06:ea:b1:10:e4:7a:0a:
3b:82:39:d2:be:bf:29:b2:68:ba:85:bb:74:66:a9:98:04:2f:
f1:31:ee:e9:e4:05:39:f0:71:81:41:da:a3:a2:7a:10:d7:e1:
3b:1f:20:7c:d5:e8:79:b2:11:d2:5c:c9:ad:de:da:7f:67:f7:
3a:1c:45:a1:9d:7d:c7:f4:40:ef:8a:9a:12:2f:b8:72:6e:5c:
ef:1f:51:8d:e5:d6:94:2b:eb:50:61:fc:8e:bf:8c:c6:48:39:
26:3a:c2:5c:b5:b0:27:08:bc:08:62:00:c6:d1:7c:c3:27:12:
26:7e:55:ee:45:af:b1:6c:8a:01:7c:39:66:45:ba:5d:55:3a:
b8:9e:7c:9e:e4:91:0e:36:bf:5b:14:6c:44:20:51:44:a7:6a:
d2:8f:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:16 2025 by rpki-client