Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: +HNxmmcuG9vnT7AdZN0Ykf3/kPsPgwpWtCagFJBAExg=
Subject key identifier: 83:BF:F0:35:03:FB:64:BF:B9:A8:98:5A:A1:7D:0F:E3:D1:A3:DF:3B
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019A5119972641E3CEEBE1427FF939C6F1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 079A
Signing time: Tue 04 Nov 2025 23:00:22 +0000
Manifest this update: Tue 04 Nov 2025 23:00:22 +0000
Manifest next update: Wed 05 Nov 2025 23:00:22 +0000
Files and hashes: 1: 9HC-dVjnSoiBjTI-wFW5Aqlq_oY.roa (hash: mG2Ma2dDqG+dXSsvT9OJk25xVpUl5+N3IsrwQpPJXsQ=)
2: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
3: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: FdAS5pQjlCitFrBNxkPcz8ZMpr0bl8TP3vHw63ZQIKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:97:26:41:e3:ce:eb:e1:42:7f:f9:39:c6:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Nov 4 23:00:22 2025 GMT
Not After : Nov 5 23:00:22 2025 GMT
Subject: CN=83bff03503fb64bfb9a8985aa17d0fe3d1a3df3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:b5:43:07:e1:cc:ef:fd:45:9f:08:d6:93:
3e:e2:95:47:12:5d:55:5a:aa:82:ae:4b:28:fd:da:
40:b9:7a:70:3d:6a:ae:7d:02:02:0a:fe:33:bd:d0:
39:60:1a:84:84:26:ff:72:90:90:6a:84:be:ab:a1:
c7:1e:f7:cd:6c:a6:43:b1:9e:5c:f2:7f:07:71:55:
19:34:76:da:d9:f3:03:b3:38:ca:30:a7:4b:75:b4:
c7:b5:3c:f7:a2:57:ce:2d:8b:79:4e:b5:85:4a:86:
42:ae:51:53:d8:43:80:bd:98:b7:b5:05:17:a1:76:
85:d4:cd:3d:b2:2c:49:7d:5d:83:1f:a0:bf:d1:5e:
09:a4:e9:90:17:38:1f:76:c0:80:8b:b7:e0:a2:78:
23:ac:0c:b2:d1:21:25:7b:21:c9:67:a2:1f:f3:8e:
be:6b:a4:2e:79:39:eb:eb:a9:d3:d3:95:c2:d6:6b:
44:74:db:02:95:c4:b5:67:9f:9c:79:e5:2f:32:f9:
b4:63:9a:40:a9:97:9d:1d:05:f3:fd:ea:c8:2e:2b:
1c:a2:20:eb:57:b4:03:4c:e9:5b:0c:c2:a6:26:f8:
60:14:6f:8b:08:46:cc:70:e2:5a:75:0f:82:1c:cb:
50:56:4d:5c:8a:63:07:42:64:6f:1e:b9:a6:0e:1a:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:F0:35:03:FB:64:BF:B9:A8:98:5A:A1:7D:0F:E3:D1:A3:DF:3B
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:32:36:52:d2:d5:bc:33:03:d2:18:ef:fe:3c:3a:1f:67:
b4:11:f4:55:00:80:ab:d3:cb:2f:53:29:ad:e3:73:9f:96:ab:
63:27:58:9c:c0:b3:ee:9d:9c:0a:79:37:6a:f6:56:18:c2:c4:
9d:2a:21:bb:ae:e3:b3:ee:86:03:b5:f2:28:45:4a:f8:38:13:
29:50:7a:95:bd:aa:95:ea:8a:df:32:b4:2e:30:c8:e9:c2:2f:
f5:46:bc:5e:c3:9e:0d:41:69:93:c1:c8:e8:b3:fe:71:c2:ce:
06:84:68:d7:4b:2a:57:3b:d4:b8:da:8e:93:4f:b5:50:5a:a1:
9e:43:b0:51:03:02:2a:c1:0a:c5:5c:54:1e:d5:86:cb:0e:3e:
cb:1b:89:8f:bd:2e:ee:71:a1:1e:09:d1:fb:10:00:01:11:4a:
92:b1:d1:3e:4e:0f:01:39:9a:7b:42:db:c3:55:5e:32:aa:9a:
50:15:92:8a:5d:5e:d3:28:6d:47:88:66:6d:b4:f8:49:2b:8e:
58:65:52:69:e9:28:a1:67:21:fe:25:11:fb:23:aa:ba:aa:a2:
75:76:8b:85:74:03:2d:3b:9e:eb:3c:1b:94:c4:c3:cb:41:9d:
42:9d:03:6f:22:a4:30:d0:c6:1c:be:fc:27:f8:09:27:9e:bf:
fe:57:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:22 2025 by rpki-client