Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: 8G3Kq3xZX9hSSkdZgzM0Rx065cNDG8t7FRRD4biqVbA=
Subject key identifier: 7B:FE:AE:F7:D1:DC:6C:2E:C3:32:28:C7:E8:91:ED:E6:B2:FC:58:6C
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0199FBEBDD32ABAFEA9409B330D8280EE669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 151C
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: xR385Fk/cAfgJqIHyg0ixJuQ4GNpCJfxxpsFscmLpko=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dd:32:ab:af:ea:94:09:b3:30:d8:28:0e:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=7bfeaef7d1dc6c2ec33228c7e891ede6b2fc586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:c4:15:e4:f5:03:a4:01:15:1b:49:63:20:
66:be:0c:ca:2e:89:d9:dd:7a:48:c9:56:24:30:95:
dd:16:ee:26:a7:b1:12:f1:9b:e2:08:90:5b:90:74:
a4:10:f9:3c:a4:d6:26:57:b6:f0:15:80:e2:e3:74:
c1:42:58:38:99:48:a7:ef:10:14:06:7b:19:81:02:
47:bb:55:7b:e5:ff:26:23:05:4a:e7:19:7a:db:98:
29:d1:a4:3c:87:ac:e1:ad:3f:6d:f8:e5:f4:b5:9c:
b5:30:c0:16:e1:48:6d:dc:aa:03:7f:47:f9:c5:29:
8b:ed:5c:13:51:1d:f5:49:92:30:7f:d7:a1:92:ab:
d2:88:10:e1:50:bb:2f:52:3d:a0:a0:f6:1f:d4:89:
a2:4d:31:0c:ee:ae:cd:e8:9a:50:19:7a:5c:58:02:
93:2c:5d:73:f7:5e:b9:50:15:12:15:8e:2f:32:90:
05:44:6d:76:e1:06:3b:91:cd:f9:91:03:83:bb:2e:
8a:25:2a:04:7c:b6:67:e7:34:4e:3f:3f:f8:1e:4e:
54:98:1e:df:4b:f1:73:5f:7a:7f:10:32:43:3c:31:
be:37:97:04:fb:23:60:c3:fd:8c:d4:f3:95:2b:76:
11:d0:d0:7c:c8:df:d4:b5:48:85:4c:44:55:f3:3f:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:AE:F7:D1:DC:6C:2E:C3:32:28:C7:E8:91:ED:E6:B2:FC:58:6C
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:24:bb:b5:8e:8e:5a:aa:9e:33:30:a2:29:61:29:38:3e:
63:e7:35:ab:dd:e4:68:1c:e1:f8:96:2f:7c:3c:17:92:f1:a4:
d6:bc:76:2f:8d:0f:4a:7d:62:67:1d:fc:f8:a6:c8:95:c4:05:
53:dd:6a:4a:c3:69:0e:72:a1:55:e1:fc:4b:40:f8:1e:5b:26:
89:3a:99:d0:ef:51:ac:91:7a:2c:88:d6:98:a2:d4:f2:82:89:
c4:0a:f8:78:99:c0:65:e9:10:49:53:60:74:22:af:b7:60:1c:
32:c4:b1:15:1f:89:0a:fa:5e:4c:83:02:cc:66:57:d1:f3:04:
e7:d9:06:2e:f6:39:04:c8:0e:c7:ec:16:98:e2:1f:49:f3:aa:
76:8e:91:9e:d0:96:6f:b9:00:6a:c5:41:a1:b6:f3:82:0f:dc:
52:b5:59:51:df:c5:37:4e:2c:96:e9:c9:74:72:7c:6b:24:fc:
1e:da:c5:f9:e3:ca:db:0a:70:c2:a5:87:bb:31:79:78:5f:22:
d0:d6:7b:dd:85:18:b5:86:af:51:82:73:e0:48:7b:98:f7:18:
1c:d0:5b:b5:d3:bd:f7:92:60:58:3b:85:e1:2c:03:41:53:1e:
28:61:24:3c:a0:8a:c8:ea:59:23:da:e5:94:90:b8:18:3c:92:
e4:cf:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client