Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File: fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier: 2hn/QHXkyqrvcpvxOvCnzZDHiosCkhtH6UmxQjRCaO4=
Subject key identifier: A3:8E:4D:22:04:3D:0D:DA:7C:B8:44:AB:2B:09:B0:CA:27:31:83:30
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 019A0147CEC042E1645BD71EDD8E624DF1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 11:01:14 +0000
Manifest this update: Mon 20 Oct 2025 11:01:14 +0000
Manifest next update: Tue 21 Oct 2025 11:01:14 +0000
Files and hashes: 1: L3jfVXtRL6_lD6BNoqXy7sEXYVs.roa (hash: bCWcb1OjgRUbcmEWxo5WVJLuY5Wam3mN/c101nJS4g4=)
2: aNZOgbC2ct7oBfvfODiPTTzSje4.roa (hash: REnD2uLHHDzM+UgqTv+vmaX5vz4XYKoCVVSGMH/Czts=)
3: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: HEoGd8Bi5A6z3ftsEdZN0JtvH1T3wCTTwPf1I77UGwo=)
4: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (hash: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=)
5: xw83wudCk127kiXHqSwTaIW46z8.roa (hash: NELCxFUdkV28jyteAlY6BEFqr7FQW+26sZ4az/+ppAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:ce:c0:42:e1:64:5b:d7:1e:dd:8e:62:4d:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Oct 20 11:01:14 2025 GMT
Not After : Oct 21 11:01:14 2025 GMT
Subject: CN=a38e4d22043d0dda7cb844ab2b09b0ca27318330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:35:c2:f0:9e:0f:92:40:03:4d:e9:49:42:
cc:de:23:f7:88:1a:8e:cc:a7:5c:93:e0:e9:5c:0a:
a7:5f:e5:65:08:fa:76:df:3c:c7:ba:28:9f:28:1f:
66:aa:30:e7:80:68:d4:0c:87:2a:29:ee:a9:02:08:
ab:83:d9:a1:a2:f1:75:af:ab:9a:67:f9:28:ce:73:
e8:5f:da:9f:b2:25:59:72:3f:62:30:6b:26:a5:70:
48:ce:e6:1b:81:f0:28:2c:0e:a2:48:fd:12:e5:df:
da:d0:e9:03:ed:3b:78:c3:cd:4e:4a:be:58:83:ad:
25:41:4a:fd:f8:08:c7:98:6b:95:26:e0:35:4b:b6:
b5:ae:bf:67:71:59:83:82:5c:7b:e8:21:2f:3b:37:
a8:5f:e7:fb:02:88:73:71:12:df:db:16:aa:11:61:
7a:ad:cd:96:ca:97:56:3e:71:f3:cd:45:b8:b7:97:
a1:9a:5d:cf:4b:d2:4f:fb:42:05:66:28:9c:80:48:
6c:6e:ed:b8:4e:4e:04:31:b2:f0:2c:62:4d:2f:f0:
93:c3:f3:33:33:39:0d:e8:13:1f:a2:c1:85:13:d8:
65:c5:62:a9:9e:e4:d8:63:b2:72:2e:c2:79:89:32:
dd:88:a6:92:df:7a:35:2b:74:1b:d2:70:d4:56:a1:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:4D:22:04:3D:0D:DA:7C:B8:44:AB:2B:09:B0:CA:27:31:83:30
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:b9:49:36:c5:19:74:61:d0:d1:47:a3:ea:7a:66:cb:fa:
6f:83:09:cc:5c:ac:c0:29:c4:9b:13:8b:a5:43:da:6c:6c:b1:
8e:e0:6c:cb:67:c2:5c:42:5d:a7:8b:e3:7a:79:15:71:82:97:
09:56:06:a9:7b:dc:b5:05:a8:35:32:d7:25:42:b1:f0:de:2e:
21:f9:fa:7f:51:dc:80:df:c5:d1:48:b1:06:45:03:d6:21:f5:
87:69:b7:8a:72:59:14:d6:bb:58:cc:1c:cb:4a:49:04:0a:02:
ca:a4:ea:42:45:3e:dc:66:c9:7d:75:2a:88:d8:92:3c:07:4b:
20:6f:56:a2:81:45:ee:9a:17:fe:86:5f:f3:35:dd:06:b6:52:
b6:77:1a:cc:d1:ff:d7:cd:61:d3:f9:74:d9:f7:34:3d:bb:f4:
9e:1a:62:c1:24:cf:a8:82:19:8d:32:d0:87:e7:28:e1:05:63:
d3:6f:7d:48:48:26:6b:41:11:27:b9:97:81:51:3a:2f:1b:30:
aa:8c:f8:a6:dc:af:a1:a3:5d:03:1c:ed:2b:af:8c:52:d6:24:
5a:7e:d5:6f:f3:dd:2c:f4:a5:03:08:b0:5a:4e:f5:d5:0e:37:
ce:58:1a:14:1f:74:16:19:33:d9:30:f1:26:48:bb:23:e2:4b:
d4:df:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:06 2025 by rpki-client