
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: 8/PExs6oD5Kr7bdDs020c+FojX7fcoS2Fr9Vz3ubnEQ=
Subject key identifier: 94:DA:17:00:C8:68:5C:EE:57:B2:00:EB:91:1A:26:9A:8F:3F:73:B7
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 0199FBEB5872AC12BE643E2D10FF35780BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: 6AcLBVqYLLOMCPftxuj2n2scH/ipsDYo09NxSCBN/hs=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:72:ac:12:be:64:3e:2d:10:ff:35:78:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=94da1700c8685cee57b200eb911a269a8f3f73b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:ee:d8:57:d9:91:ba:8f:22:cf:b9:31:37:
72:e8:5d:06:7c:0b:61:dc:64:94:f4:96:d3:59:40:
90:76:90:2b:95:cc:2c:85:40:5c:6f:2c:bc:b9:15:
32:eb:76:02:14:d6:ba:6f:83:ef:82:84:1e:c0:a0:
45:45:a1:4d:65:cf:23:b3:7f:f0:42:d6:71:b3:64:
b5:28:c2:c3:e0:63:2d:16:98:38:aa:e8:05:e4:23:
df:a2:92:23:c7:2e:1e:ad:4d:62:2d:e6:a0:15:c6:
2a:24:45:a9:e5:ce:d4:11:66:67:3e:4a:1b:c0:e8:
3d:c3:c3:99:ee:6a:4f:3b:37:87:79:28:7d:e3:18:
0f:5e:19:41:d3:39:54:4e:dd:10:20:d7:7b:89:cd:
40:b1:11:59:a8:74:e7:72:76:c5:d9:5e:9d:50:94:
be:2c:32:1f:fb:07:39:6f:1c:67:33:13:8e:5a:54:
55:c5:f9:ce:71:32:44:de:98:50:e3:74:6d:6b:85:
18:8c:de:8e:8c:89:f3:1d:8b:43:3c:d3:53:72:c3:
2d:ab:5a:60:3a:33:5a:bf:05:34:f3:1d:da:d3:c8:
4d:e4:ce:46:6d:7b:bb:fd:da:1e:2f:91:73:fd:4f:
c9:c7:e7:f7:4a:3c:2b:22:cc:f2:77:e7:d7:0c:a1:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:17:00:C8:68:5C:EE:57:B2:00:EB:91:1A:26:9A:8F:3F:73:B7
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:7b:12:ed:ef:5c:d2:14:5f:2a:b4:08:72:e9:48:7a:32:
73:40:82:60:f2:46:25:c1:42:23:f8:ee:a5:2c:81:1f:12:e6:
d0:01:04:71:59:e6:41:7b:57:4f:27:c2:31:66:df:24:56:9f:
73:64:d3:cb:38:93:c0:e5:ca:ec:46:d4:e2:ba:51:b9:a5:54:
e8:d7:e4:e6:37:ff:7b:83:a1:20:90:1c:f3:9d:1c:56:0d:fb:
2b:63:b4:68:8a:fd:ef:34:05:f4:51:ea:1a:3e:91:56:97:bc:
28:2a:83:d3:92:8c:83:1e:71:ba:6b:f4:21:8b:be:3e:4f:ff:
1c:b8:f5:4b:c5:7c:21:12:19:34:2d:5c:f8:a4:b1:40:b3:b2:
d5:62:8b:7e:4e:07:36:3d:6b:f8:ae:d3:c2:0b:fb:00:fd:11:
5f:37:cd:78:b3:c0:47:04:3a:e9:dc:6e:df:55:2b:81:e1:89:
8b:43:86:15:0f:01:33:22:cc:27:11:32:b4:5a:3d:4b:5a:e2:
61:11:bb:3b:f4:1b:98:a6:20:df:23:e7:eb:86:eb:73:59:4f:
22:1a:0e:31:2e:71:48:ef:97:4f:4f:dc:d3:cc:42:28:b7:78:
de:89:9c:7f:3c:51:4a:74:c9:2f:07:c5:fb:1e:c6:b4:4e:f8:
4e:f0:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:54 2025 by rpki-client