Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: T9aKNwKsB8KM6vqbyMySjMRl2pXQGcZVZl7KcLpiu3c=
Subject key identifier: BA:E4:6C:15:F0:CA:F6:B9:36:26:11:B7:B7:5C:BB:04:15:6D:02:28
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 0199FE10241CC3E38BD065266A5A9CD918A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:34 +0000
Manifest this update: Sun 19 Oct 2025 20:01:34 +0000
Manifest next update: Mon 20 Oct 2025 20:01:34 +0000
Files and hashes: 1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: NtbXUkKweoy96GkGyr8VqohUk7oCN4SCnnBfk52id1o=)
5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:24:1c:c3:e3:8b:d0:65:26:6a:5a:9c:d9:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Oct 19 20:01:34 2025 GMT
Not After : Oct 20 20:01:34 2025 GMT
Subject: CN=bae46c15f0caf6b9362611b7b75cbb04156d0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:ce:2f:b1:4c:c1:16:94:bf:21:5f:bc:df:
a7:91:40:38:97:35:c1:e8:94:38:9f:9e:9b:bd:a0:
00:1b:25:93:1f:70:41:5f:ba:8a:43:6a:bb:7c:f4:
10:fa:30:1c:0f:46:46:94:8b:6f:ad:35:bf:bf:2e:
4d:11:00:76:00:37:6f:59:f2:33:76:ea:1a:32:a7:
16:f0:58:1d:21:d0:78:68:21:1c:36:dd:b3:bc:10:
c9:73:4b:eb:5c:db:78:12:fe:b0:05:b3:8b:3b:cd:
e4:51:5a:ef:0b:62:b5:3f:1c:97:13:09:e0:91:1c:
ca:9f:53:44:fe:c3:92:bb:6f:a8:71:c6:44:64:86:
29:21:89:c9:d4:6a:13:1a:76:b5:99:a9:af:39:a3:
39:de:3a:5a:84:5f:ae:da:ee:3b:ba:5a:76:70:e1:
1b:7e:3e:cc:16:27:82:e6:79:b3:7d:49:d4:80:c9:
ca:12:2d:f4:8d:e7:bc:b3:1e:f3:86:29:c6:f7:44:
65:a6:f6:39:45:fe:c6:54:44:12:5e:85:00:5a:12:
03:b8:c3:ce:b8:38:aa:51:33:00:d2:94:ee:6e:35:
d3:95:5a:a1:53:78:53:47:c2:2c:76:08:79:57:13:
40:01:09:a4:eb:47:cb:25:79:76:c7:d6:13:75:f8:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:6C:15:F0:CA:F6:B9:36:26:11:B7:B7:5C:BB:04:15:6D:02:28
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:6f:35:06:fe:82:54:eb:48:0a:f5:21:d8:b3:8e:92:60:
88:f5:2f:0e:cf:2c:40:0c:13:6b:6d:94:2c:39:93:71:82:73:
4e:4f:a0:c2:7a:89:cc:ce:5a:e0:52:d6:70:9a:50:55:ca:6f:
97:1f:fe:42:ab:7d:c8:64:fa:be:77:21:74:23:f1:57:96:c0:
3b:48:5d:d9:39:30:35:17:23:a7:cc:3e:4e:99:d8:62:3b:af:
43:a2:ca:98:98:60:61:35:2a:59:31:97:b9:43:51:e9:df:5f:
26:80:42:d0:95:33:7d:d1:ff:a8:48:d7:ed:d9:61:39:f5:fc:
da:c4:7e:58:6b:18:27:f6:12:45:6b:4b:8c:59:ad:69:d4:64:
20:1a:0c:a4:f4:ac:20:75:dc:06:14:17:88:26:44:95:fa:36:
95:61:44:f1:68:20:b2:03:b2:2a:8d:78:3c:44:59:70:61:67:
18:4c:db:d7:0a:25:2b:22:26:7c:df:78:f2:e3:aa:cf:65:8e:
98:e3:67:96:dd:5e:ab:20:0a:26:44:36:85:18:0a:14:4c:ff:
86:b7:6c:3d:16:1b:91:d2:89:ad:f2:4d:c6:74:f0:8d:42:f0:
57:81:c0:78:2d:41:35:d7:9c:07:95:17:f6:2a:c0:4b:84:22:
59:60:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:51 2025 by rpki-client