Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
File: Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft (raw, json)
Hash identifier: LLJUCSlHUyy06UX/77v64v9QZysFEcNPtiir2LGrwPg=
Subject key identifier: 29:16:9C:36:60:50:2A:8F:72:44:60:88:C7:B4:40:3D:BF:90:2B:9A
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 019A5451A3CA6EDCD4996BACCB5DA63B78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 14:00:27 +0000
Manifest this update: Wed 05 Nov 2025 14:00:27 +0000
Manifest next update: Thu 06 Nov 2025 14:00:27 +0000
Files and hashes: 1: Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl (hash: 9U94x+7t6+y9EpPAAtHftp5j+Z4uPsq1PLQnpS7QbQY=)
2: cHCcPH0sTsoVeQvPNjr4F-v6pdk.roa (hash: ZU0tGbeZyiLeaZ6kaj1s8GJf3FuM5JQJwKTD0CloP/c=)
3: rSUUwkCTafmsCOhD-uI-_PP_ksU.roa (hash: n7ICRmWq6zp/x+daYVk+J66wnqsGhzVt3SgaUyuiB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:a3:ca:6e:dc:d4:99:6b:ac:cb:5d:a6:3b:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Nov 5 14:00:27 2025 GMT
Not After : Nov 6 14:00:27 2025 GMT
Subject: CN=29169c3660502a8f72446088c7b4403dbf902b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:41:12:25:05:fb:1c:a5:6a:f4:57:7f:2c:
1b:a5:53:ee:6f:99:ef:b5:f2:dd:d0:e3:23:75:e2:
c6:81:fd:8b:e9:ac:ec:f2:a8:1d:62:b6:21:8c:d8:
86:10:56:b3:82:55:6d:b7:2b:3e:f5:d3:19:b7:00:
8f:ce:c6:ff:80:f9:d7:64:47:28:8e:78:58:ce:ea:
5d:c4:22:4b:f0:61:a1:12:64:b0:34:83:34:ed:8b:
52:66:d6:96:ad:4c:f1:e8:8d:34:9b:7e:5c:32:72:
61:97:d0:ba:79:f9:d4:da:8c:88:6f:67:1a:93:6c:
f6:08:fe:71:46:ec:35:58:3f:50:23:7f:c3:9c:92:
78:c2:93:7d:7e:72:6e:97:c1:c7:e3:49:f6:11:0d:
17:b2:ba:8f:bc:ee:28:67:07:e8:fc:73:9d:96:f4:
c6:32:8d:1d:62:c4:77:60:18:35:ab:de:46:82:ca:
ac:9b:90:72:8e:23:98:62:35:80:51:7e:0f:f1:73:
b5:51:af:1f:ee:83:23:97:3f:1e:96:6a:fe:d6:40:
0c:3c:f8:84:2f:37:a5:6d:3f:be:74:bb:6f:36:99:
da:0f:39:e0:42:34:ae:05:e9:cb:1f:aa:f1:da:de:
f0:9b:f7:6c:9d:ed:b0:c4:7c:47:d6:89:8e:2c:a3:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:16:9C:36:60:50:2A:8F:72:44:60:88:C7:B4:40:3D:BF:90:2B:9A
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:c2:4a:ba:cb:96:6c:38:07:e2:8b:b8:8a:c0:44:c4:2f:
70:98:71:a2:5c:ba:26:8f:57:c7:60:66:30:36:4c:de:8c:e4:
ae:42:3a:49:5b:14:e7:ca:71:0f:0f:c2:3e:90:73:b1:04:50:
94:05:34:aa:54:dc:9b:e9:6b:40:b8:31:56:af:3e:42:e0:96:
cc:77:9c:46:c7:ae:e5:96:8b:57:a9:60:b4:8d:45:de:1f:1e:
01:22:07:ac:fa:f6:d2:98:f7:6a:7a:95:a7:c7:6b:fb:30:92:
51:9c:0f:00:7e:67:5c:af:7a:e3:8b:73:6a:6d:1d:81:e2:82:
2b:6d:87:ab:46:8b:ed:e0:a7:44:1c:3c:d3:65:06:67:7a:56:
7d:c1:a0:50:88:c1:28:40:e2:92:fb:d5:62:9d:83:0d:22:8b:
cf:c2:aa:f7:83:07:b3:a5:c6:0a:e1:43:93:5e:1e:02:e2:43:
36:ca:a5:2b:53:79:a1:5d:d8:03:b9:65:0b:d4:9a:14:37:20:
a6:75:db:e0:88:fc:cf:b7:0b:32:45:5e:eb:dd:a5:30:c3:43:
40:4c:0f:4e:5a:bb:6b:20:fe:30:cd:38:60:8b:ac:2a:5c:75:
76:14:22:fb:65:77:f5:f4:ed:fe:57:53:b6:59:e5:31:11:09:
44:31:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:37 2025 by rpki-client