Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: K3sZYy9a+s1ZrHrVAf/2qkaaNHfia6LRMdNOc5SWUzY=
Subject key identifier: 16:CE:76:AC:95:BF:95:BC:C7:B3:80:28:9F:5B:78:7C:D3:8F:66:5F
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 019A4EF53B22F301277217B001085979125F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 0F12
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (hash: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=)
2: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: cnXOpgP2nxJnpMaY8zWrrvQm7+vi8Ejh5sD1/WDNXMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3b:22:f3:01:27:72:17:b0:01:08:59:79:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=16ce76ac95bf95bcc7b380289f5b787cd38f665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:d4:ee:71:bd:f4:98:f9:2f:67:ed:54:53:
09:ea:f6:fc:83:24:20:64:d9:65:c5:88:33:c2:6d:
a4:cd:40:26:d8:0e:4f:0b:ac:d1:fb:71:69:b8:73:
7d:48:71:bb:13:ed:28:5f:97:f3:f8:b2:7d:a3:4b:
4f:4a:e9:0a:a0:80:ae:9b:16:d8:2a:8c:58:d9:b2:
4d:ab:ee:fb:58:1c:d2:44:7a:ca:1a:e8:e9:ce:a0:
1d:90:96:38:c9:9f:b3:c4:4f:17:78:af:c8:8a:87:
6c:53:34:2b:92:81:1e:84:8f:8d:7a:3a:82:cc:47:
d9:bd:8d:d9:c5:01:d2:49:80:12:5f:50:7a:8b:40:
6c:10:b9:27:fd:da:cf:26:b5:38:7e:07:25:92:44:
f7:fe:22:91:6e:70:63:d7:78:41:a3:20:22:49:00:
6a:17:ec:8c:ff:14:60:ed:16:08:43:c2:af:34:a5:
5d:e5:81:c3:68:68:5d:9f:f9:6b:2d:93:04:71:4e:
5a:5b:23:55:30:f6:6d:2d:1d:ec:ae:47:c4:78:66:
f0:e2:60:a5:cb:16:aa:20:c8:d5:6f:00:db:84:24:
05:a5:9d:ee:13:b8:2b:f3:6b:53:ff:53:9d:f0:56:
ae:17:cb:c5:7f:65:fb:2e:de:f5:a1:6c:03:d8:46:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:76:AC:95:BF:95:BC:C7:B3:80:28:9F:5B:78:7C:D3:8F:66:5F
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:60:b9:2d:14:b8:94:f5:f7:b2:d3:91:2c:39:19:a6:63:
a8:1a:59:ef:97:e0:5f:23:cb:8a:93:3f:28:5f:d4:32:6b:ec:
fd:5d:da:ee:6f:ee:60:ab:9e:0f:db:c6:70:61:2d:8f:f2:3e:
e0:1e:89:08:58:02:a5:7e:00:b4:4c:6e:28:3f:f2:93:c6:0f:
44:89:0b:92:00:09:81:74:e4:66:48:36:ba:53:be:3d:4c:47:
8c:65:77:44:98:f6:82:25:70:61:b3:36:d0:03:ef:52:51:88:
84:6f:8c:4a:1f:55:de:67:64:9b:d6:cd:5a:16:c7:cc:9e:de:
04:36:76:b8:c8:1f:69:50:54:ae:ef:b5:1b:85:87:4f:85:05:
be:1f:89:a7:54:ca:c1:80:f9:f1:1e:69:91:78:23:76:05:57:
06:c7:da:86:2e:ee:38:71:c8:4e:2d:b1:d6:47:e8:4f:37:dd:
79:10:cf:4f:25:92:33:93:ce:77:3a:84:45:54:80:55:ac:e1:
d4:a1:42:bd:e6:55:ca:48:ce:7f:95:4b:43:b8:d4:61:5c:18:
b0:a8:8b:e6:9f:32:40:0d:dc:42:6f:7f:99:d1:d7:57:b5:b2:
4b:6e:3e:99:43:2d:b5:02:88:70:e3:b7:57:83:56:c0:68:a1:
d8:81:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:16 2025 by rpki-client