Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: tgvqZqJV3uA1BWhII9zBFxT5h7D4UPY7d79HFQAU8oc=
Subject key identifier: 97:8C:41:4C:78:35:33:E7:94:FC:A5:45:F4:40:CC:CA:87:F2:FF:34
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 0199FCC65A8FCEC20429C888E5F7602A541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0FBD
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: 2183DCbYE4SZxJWTk+1r1yIpdqV1cTeIkR2ESsskqck=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5a:8f:ce:c2:04:29:c8:88:e5:f7:60:2a:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=978c414c783533e794fca545f440ccca87f2ff34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:e4:89:b4:f6:7c:f8:56:29:50:31:fe:c7:
90:0e:22:c6:fc:34:89:2c:36:5a:94:a7:ae:5c:63:
b3:84:9f:c1:ff:f3:39:6f:d4:17:38:ec:da:c9:17:
ae:5c:e2:50:6a:79:62:6d:47:6b:b0:cc:51:9b:7e:
bf:6a:d1:3a:f9:b3:ce:da:be:6d:a8:98:27:2e:48:
e9:fd:97:8c:28:5e:96:41:8e:24:bf:70:f0:6e:8f:
5a:b3:5a:f4:5a:d5:2a:1c:36:28:a2:44:41:df:82:
3b:c4:52:2b:b5:1a:91:80:7e:6b:4b:92:11:23:76:
c4:cf:06:a0:14:3c:fb:2f:42:1e:30:4e:43:2c:12:
3b:a3:a9:a5:45:53:0d:10:79:35:cc:71:bc:b1:f8:
e3:5d:2a:57:80:cb:33:d1:1f:1c:e9:d6:23:41:05:
c7:8a:41:2e:5d:83:9e:0d:72:21:f9:30:9d:62:7d:
77:1b:ad:ad:9c:c9:57:48:23:de:05:a3:15:b5:51:
33:ed:ae:2c:96:dc:96:f5:43:66:96:65:a3:ee:33:
0b:91:aa:6c:01:f3:31:ee:82:58:01:a2:dc:3e:4d:
6f:b4:21:bc:ff:75:6c:e9:26:e2:e6:e8:a7:ac:9d:
16:20:f4:56:91:cc:2f:dc:9e:6a:f2:6e:f1:76:ec:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:41:4C:78:35:33:E7:94:FC:A5:45:F4:40:CC:CA:87:F2:FF:34
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:6b:69:1c:35:90:5d:fd:76:8c:55:37:9f:f2:26:66:8e:
5b:72:e9:b8:86:44:2e:1d:67:8e:a7:d6:23:99:9d:82:02:a4:
7c:77:42:09:40:55:d5:7a:71:66:5e:fd:44:4f:fd:b6:28:60:
f5:7f:3f:b0:b2:58:b6:f5:a1:e6:22:ac:ff:f4:a2:ef:32:d8:
12:bb:cb:67:d6:a5:f8:ec:42:6b:dc:0b:41:ec:35:28:1c:fb:
13:9d:be:8d:a1:8a:9f:81:f6:ee:9e:fe:93:3b:b4:27:89:22:
d1:69:28:af:a2:56:00:ea:c2:3d:db:77:c0:ee:81:c6:cc:66:
17:f5:7b:bc:0c:81:ff:80:f3:45:eb:47:dc:1a:0a:b2:bd:2c:
b6:8d:bc:45:ef:d6:6e:96:41:bb:03:9b:ba:e6:c9:04:75:f2:
b7:29:0b:ef:9c:63:64:c3:af:25:20:b2:d5:bb:d9:27:e3:40:
26:67:2f:94:ac:60:ca:98:28:9c:a0:b4:0a:d1:ff:ca:18:f3:
e9:21:57:20:80:b5:32:38:4e:7b:84:35:ae:1a:8f:cd:f6:5f:
78:85:ab:74:4c:59:1b:51:2b:7c:35:16:33:30:86:08:53:f2:
52:a7:33:64:d4:e9:1a:c2:cc:f3:e1:02:af:f6:c3:26:d2:1b:
e8:3c:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:22 2025 by rpki-client