Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: ZGr242sWtb6BB2gDKVSJboIDJOndG1f77LKNdna35PI=
Subject key identifier: B6:DF:74:79:3B:1F:F6:94:5D:C3:82:F0:AD:CA:B3:DC:EF:1B:71:B4
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 019A533F218FA213D59BFF41EB7280D81BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 1213
Signing time: Wed 05 Nov 2025 09:00:37 +0000
Manifest this update: Wed 05 Nov 2025 09:00:37 +0000
Manifest next update: Thu 06 Nov 2025 09:00:37 +0000
Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: lian/YgMct433m3+njhpNWj0vSGqWemGhzuZ/YPhr9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:21:8f:a2:13:d5:9b:ff:41:eb:72:80:d8:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Nov 5 09:00:37 2025 GMT
Not After : Nov 6 09:00:37 2025 GMT
Subject: CN=b6df74793b1ff6945dc382f0adcab3dcef1b71b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:d5:f6:c3:90:9b:8c:d0:f4:46:d4:85:a2:
89:de:12:50:11:8e:25:8d:24:e9:5e:46:8a:13:2f:
5b:e6:55:22:ca:29:09:c8:6d:d6:6a:14:0e:e1:9a:
bc:da:26:2c:46:cf:a7:2a:b6:5f:c6:73:cd:97:96:
8a:77:d5:9f:1a:e6:ba:40:d0:82:34:fe:94:6b:c5:
d8:f7:2a:64:c4:7f:19:7b:8f:80:f4:2a:ef:ef:36:
f4:9d:9e:33:6e:ac:48:8c:54:97:d6:ee:b6:b5:dc:
9b:a0:8e:4f:9c:ce:ee:5c:ee:e1:7e:a1:c5:ff:8a:
1c:bd:a9:7c:8a:10:ef:96:db:f3:5f:ac:cf:79:d4:
e5:c6:29:a8:db:1a:79:7c:7d:21:c6:2e:39:71:1e:
2f:de:4d:f2:5d:e7:56:1e:70:8b:cd:e2:5d:c7:b1:
f8:0e:3b:f1:58:7a:0f:3a:fd:ef:6b:dd:43:23:6c:
25:c5:8f:8c:4e:61:d8:9f:8f:82:8b:1d:02:9b:49:
30:9c:50:3a:5d:83:77:7c:2c:24:25:05:e2:81:68:
38:a4:3f:be:09:c3:e8:1a:df:11:b1:6b:d8:c9:c8:
b7:01:7a:2f:22:45:b6:3e:d0:9a:8a:7c:04:7f:29:
34:e9:9d:7a:94:67:55:f7:8d:5f:9a:96:c2:d7:36:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:74:79:3B:1F:F6:94:5D:C3:82:F0:AD:CA:B3:DC:EF:1B:71:B4
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a8:01:4f:d5:c0:39:e1:d0:67:07:34:76:cc:c4:ba:b2:c1:
81:d9:6c:0d:cd:33:32:54:be:8e:9d:71:6c:46:e7:08:89:75:
c6:1d:2e:ca:f7:17:e7:ce:3f:94:8c:10:8c:e1:91:49:f1:7d:
4b:8e:09:20:64:15:3c:5d:7d:16:2d:71:d9:67:c2:e8:ac:8b:
08:41:71:ca:34:f5:b7:40:c7:d2:13:69:42:8f:5b:92:33:69:
ab:26:91:b6:c9:fe:d1:99:7e:9c:f7:25:44:0c:77:ba:ff:fc:
50:ff:c3:c8:11:13:8b:8a:31:5b:8c:e4:54:28:5d:05:5f:c6:
52:e4:53:e5:68:0e:7d:0b:b6:1d:28:79:d4:3f:5e:26:79:4e:
ee:fe:2d:6d:9a:75:32:a4:1c:4d:84:bb:24:49:99:af:20:55:
db:f7:7f:3f:1f:66:5a:4d:c8:bc:0f:4b:b1:1e:e8:28:7c:dd:
f7:e3:ee:b9:9f:07:59:c3:83:dd:a8:5c:12:d0:ec:c7:c2:52:
c9:60:dd:be:7d:bc:bf:9b:7b:c9:8f:c5:a9:f6:b5:0c:37:be:
7c:25:78:d4:d7:74:de:67:0e:4a:6b:c0:dd:d1:6a:78:25:8f:
8a:f5:42:cd:3a:7b:aa:cd:5c:f2:43:86:b9:af:02:a8:0b:9c:
64:97:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:47 2025 by rpki-client