Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier: kliglHdvdkqhDe/W7+DnaKcU5ZB+og04QwcPa24I/Ko=
Subject key identifier: 8A:8C:BF:37:DA:EB:03:48:31:8D:AB:E5:61:6C:9A:90:B2:B8:70:93
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial: 0199FDD9E4E05C5943D75B1974F8B6770B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: BeGWzxvE8C+Lwv+2fuC4jy5I7qUhhPiW1a7BkeINKU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e4:e0:5c:59:43:d7:5b:19:74:f8:b6:77:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=8a8cbf37daeb0348318dabe5616c9a90b2b87093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:17:ae:62:fe:33:01:7d:32:f0:63:a0:6d:
f7:78:a4:0a:c5:e5:78:ed:98:9b:42:ab:2d:f7:f8:
da:54:bd:da:dc:2b:e6:41:77:3b:c1:3e:b6:0d:0c:
df:73:7c:a9:3c:ce:e3:81:e4:7e:47:50:8c:24:ea:
fd:84:62:3f:f5:07:53:4a:e1:f6:3f:dc:51:39:ea:
2b:a3:54:4a:63:40:db:8e:6e:68:b8:9c:b9:21:08:
6d:e3:f8:75:bb:a9:06:02:ea:06:d1:9b:e2:cf:cd:
bc:b0:bb:f0:1e:2a:f3:5e:7a:85:07:01:96:35:2d:
f7:9c:f2:3f:da:74:0a:5d:8b:a2:52:50:d4:a1:85:
cd:08:d5:92:7d:53:54:c7:20:c8:b3:46:84:8a:0b:
3c:ed:69:9c:b6:07:52:6e:f8:43:94:fb:a9:17:60:
74:92:2b:37:0b:51:32:1e:ab:57:33:23:62:fa:ba:
4d:93:22:e8:51:a4:9a:aa:56:7f:30:c3:df:a9:82:
97:ec:ad:1a:21:50:34:d7:53:92:1d:18:80:b0:c7:
a3:93:c8:a5:e4:3c:1d:50:29:78:2f:83:75:7a:66:
da:f3:7e:67:28:04:bd:f1:39:0d:ae:b6:a1:cd:c0:
cd:dc:95:bc:a1:e8:cd:98:97:74:71:a0:14:33:3a:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8C:BF:37:DA:EB:03:48:31:8D:AB:E5:61:6C:9A:90:B2:B8:70:93
X509v3 Authority Key Identifier:
keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:9c:87:9f:a6:e2:79:b9:c6:f2:21:74:72:08:5a:21:82:
d2:14:b4:6a:13:d1:76:87:9e:49:1c:d2:a6:17:d2:b4:8b:bd:
a0:22:27:a8:25:33:34:70:33:6b:72:47:1f:ed:a0:80:22:a8:
f6:6c:56:11:13:d9:a3:75:9a:1e:18:43:f7:1d:5e:a0:04:68:
7e:9c:92:17:2c:17:bf:25:03:de:da:e1:ca:dc:ac:8c:6b:aa:
35:32:d5:58:2a:6b:e4:36:24:ad:1c:07:f6:a5:1c:6c:b3:78:
7a:ee:e2:1f:44:1a:5b:05:c9:67:ff:d8:c3:c3:d1:f1:29:58:
d3:5b:56:43:d3:dc:cb:0e:0e:b1:98:84:84:51:d8:60:9c:cf:
40:37:0b:48:b2:91:02:0f:06:2b:c6:28:07:c0:db:0b:62:33:
9b:4d:8e:d4:7f:eb:5d:fd:08:fd:37:eb:41:fb:ee:07:b4:69:
9c:8f:34:e8:44:06:73:93:66:3d:57:06:9b:72:b3:17:72:b2:
74:c5:1d:5c:ec:c5:af:a0:44:9c:81:99:d3:82:3a:36:92:69:
72:3b:3b:27:56:61:c5:7b:0c:4f:4a:98:f8:3c:e4:b2:dc:b6:
5d:31:f6:d1:f3:3b:1c:69:af:e2:cc:2d:4b:a7:e0:4a:95:c4:
24:2f:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:50 2025 by rpki-client