Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: ppLwOM7joJ2Uu1IMRPip0NHC9xEyMYIY4ryqSzoL044=
Subject key identifier: 9D:41:7A:88:73:AC:28:9B:56:05:2D:08:58:57:25:78:3F:F7:D0:50
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 0199FDDA5596D89FD616D701D59C899FF1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 13B8
Signing time: Sun 19 Oct 2025 19:02:48 +0000
Manifest this update: Sun 19 Oct 2025 19:02:48 +0000
Manifest next update: Mon 20 Oct 2025 19:02:48 +0000
Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: 4k6MscnsC4a4foGgSuUSUz8H+s+UUXkJYL4jx+YU5Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:55:96:d8:9f:d6:16:d7:01:d5:9c:89:9f:f1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Oct 19 19:02:48 2025 GMT
Not After : Oct 20 19:02:48 2025 GMT
Subject: CN=9d417a8873ac289b56052d08585725783ff7d050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:b8:36:80:6a:48:b3:f0:7c:b4:9e:fb:e8:
72:4d:90:2e:c3:a1:92:89:e4:c8:d2:70:a1:0f:e0:
1c:4a:c1:84:d9:eb:43:33:6e:35:2e:f3:9a:52:87:
f6:4b:e6:45:1f:f6:de:8f:0c:67:4e:4a:00:52:70:
b4:9f:5a:4e:44:bb:79:95:20:8b:fb:a5:6a:4d:5e:
10:cb:8d:c5:13:cd:56:5d:35:df:37:52:64:83:5f:
06:78:17:7f:ff:d9:14:ba:06:09:c1:0d:0e:96:bd:
25:be:8e:22:17:a1:5b:19:71:6d:6c:35:f4:54:25:
33:65:d9:fa:cb:0d:c8:53:d0:3f:29:ca:b6:e8:d5:
0a:43:d0:6c:a4:8b:f6:cc:15:47:65:02:9b:28:6b:
16:70:ba:72:0e:74:b8:e7:59:b2:f8:4c:20:7c:ad:
79:f4:f4:65:d7:07:c2:32:ee:ea:d2:a6:51:ea:58:
f5:e5:d2:97:e8:e1:3f:7c:86:1b:df:55:8f:c1:09:
bd:24:26:1a:83:1f:88:d2:f9:98:3f:50:a8:f1:30:
34:95:2b:af:9a:eb:31:ea:5f:84:a7:84:8c:09:37:
dc:15:75:5b:56:02:c6:11:62:90:71:7b:73:3d:85:
a2:1b:19:15:77:4f:a8:0a:77:3d:df:2b:45:60:2c:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:7A:88:73:AC:28:9B:56:05:2D:08:58:57:25:78:3F:F7:D0:50
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ed:44:43:11:1a:cf:6a:74:08:d5:40:29:e3:8d:67:05:6b:
98:8e:a2:6c:f4:2d:3b:31:1a:81:f0:45:33:8a:f1:aa:6f:7b:
2e:74:65:04:77:3e:cc:d9:44:83:5f:fe:29:31:9c:0d:2f:22:
fd:5f:37:64:ff:d0:87:7b:17:12:60:32:46:de:7d:72:79:d2:
55:14:b2:0e:95:f2:97:25:11:c6:c2:86:00:c4:7f:7f:13:43:
22:88:82:11:96:75:f9:8e:d1:8c:b1:62:18:f6:3d:fc:98:e7:
f1:31:33:71:f6:bc:86:1c:c3:82:b6:75:63:6c:03:81:35:59:
d4:16:41:63:dd:77:fd:88:92:b6:16:85:c5:b8:f8:8e:7e:9c:
fd:68:b8:97:be:10:31:81:b2:f6:51:d4:d3:e4:c0:be:40:da:
e4:4f:3d:bf:ef:5a:71:d5:d3:e7:b2:e8:ab:11:0d:07:fa:53:
79:df:7a:7f:b5:ce:3c:df:e2:6e:ec:93:ef:fa:74:d8:fe:99:
e1:30:ac:4e:14:09:8e:d2:9e:c5:24:bd:bd:12:70:a8:10:31:
fc:60:e6:b9:fc:e3:8a:66:aa:d5:3e:07:e5:e5:a6:df:fc:ce:
65:46:2c:67:9d:65:89:6f:56:23:8c:66:55:79:c9:b6:2e:8c:
c5:7f:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:14 2025 by rpki-client