Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: FaMpIJntVYH+rY44KTAsEpkj/5pEzvF1JjJabpiNlF8=
Subject key identifier: 52:AA:9D:CB:FB:19:CF:E4:47:92:BA:92:F8:ED:C1:B6:83:48:74:B7
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 0199FB7CB68304904954521BD2F1D06150FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: /mFrxLpKzLZUlSlxti6VosB/7fk98Lgw5Pki6InoC28=)
2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b6:83:04:90:49:54:52:1b:d2:f1:d0:61:50:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=52aa9dcbfb19cfe44792ba92f8edc1b6834874b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:38:f2:ad:94:9a:6b:49:06:17:48:55:3e:
17:fa:5a:b4:b7:7d:d3:52:96:dd:a5:50:d3:28:31:
39:50:09:5e:81:b9:96:18:5d:91:ae:0c:f3:e2:08:
69:d0:88:3c:ea:ab:98:4e:be:ed:23:38:6b:25:d5:
a2:81:15:b7:1d:43:a0:ea:fd:76:63:3d:2c:53:d0:
12:7c:ba:64:54:e1:61:c4:54:c9:42:3c:08:b2:72:
df:82:d9:d0:2d:2a:26:21:2c:32:4f:b0:77:d8:bd:
36:97:0f:cd:e8:36:d3:b1:5e:0b:1a:9d:82:4c:6a:
74:22:ec:fe:7c:3e:b0:a2:2d:88:fb:b7:4f:7f:bf:
7c:2a:f8:56:7c:d2:c9:6a:ec:a3:f1:79:37:49:1d:
18:6c:45:17:e6:0f:e3:08:b7:f9:28:bd:7a:d3:83:
67:84:eb:db:a4:48:e0:74:e4:7c:1f:b8:ff:25:11:
b5:e3:8e:e8:35:a0:4b:da:51:44:a2:50:43:15:4e:
c1:f4:97:47:cd:53:29:39:5a:c4:f0:56:ff:7f:ee:
06:1b:fa:19:97:c4:ea:4f:d2:46:68:67:d4:a7:70:
46:03:99:79:1a:f7:c7:bb:8e:48:85:8a:a6:2c:96:
7f:31:b6:f0:c9:3e:47:b5:74:09:9a:33:56:a2:83:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:9D:CB:FB:19:CF:E4:47:92:BA:92:F8:ED:C1:B6:83:48:74:B7
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:57:3d:cf:ff:50:22:d5:d8:51:d3:e4:58:b7:f2:c7:e5:32:
11:08:f6:2e:c5:34:f8:04:6a:bc:aa:71:8a:20:d7:37:0d:a2:
e1:31:11:65:72:20:6b:02:6f:7d:3c:c4:01:d9:54:f3:f2:7e:
0c:2e:70:68:aa:de:95:cb:17:48:a9:de:03:0f:7b:01:4a:56:
a9:90:dc:65:d3:86:00:c3:a5:c6:33:c1:f5:a5:d8:0b:fe:3e:
2d:32:c8:d1:2e:1b:33:c6:f9:ce:24:21:0c:f9:59:5f:d1:fb:
06:48:1a:84:18:83:b5:f2:bf:3b:d5:80:e8:b0:56:37:d6:35:
9d:57:d6:72:4e:97:b1:56:cc:0e:67:72:cc:df:31:55:7c:59:
96:df:0a:8a:40:a5:39:89:c0:fa:e8:41:b5:8f:ce:92:9f:48:
00:1b:e0:d4:1d:32:65:33:56:0a:90:1c:b6:66:9a:1c:7f:84:
20:6a:60:39:29:4e:a6:a0:16:35:77:c4:b4:f5:7b:2c:73:8a:
38:18:fd:0c:4b:9b:02:28:53:80:3c:8a:ba:3e:1e:d5:8c:d3:
9d:33:5e:41:65:5f:a0:2e:6f:e1:6e:f6:c5:48:bd:83:f3:6b:
61:0e:6a:e4:32:18:00:0c:63:a1:c0:ee:f7:28:1f:04:76:b4:
7c:9f:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:24 2025 by rpki-client