Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: mKbQse5prXYV/Ti6zaErdpIjRXnBMryrVqgkXbMAgKo=
Subject key identifier: DA:2F:19:8A:92:37:1E:8E:D8:24:05:8D:10:21:5A:E6:34:1F:05:B9
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019A5307D3F642D5FF1840694F0A9D965B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 11CD
Signing time: Wed 05 Nov 2025 08:00:13 +0000
Manifest this update: Wed 05 Nov 2025 08:00:13 +0000
Manifest next update: Thu 06 Nov 2025 08:00:13 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: KY+mLn648uq00aj0l/9Qu8icQtGqb0oSJYvBK2rouj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d3:f6:42:d5:ff:18:40:69:4f:0a:9d:96:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Nov 5 08:00:13 2025 GMT
Not After : Nov 6 08:00:13 2025 GMT
Subject: CN=da2f198a92371e8ed824058d10215ae6341f05b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:57:68:e8:03:9e:51:1c:28:94:ad:3a:75:
8b:2c:68:58:ba:37:c4:b2:4c:be:27:26:76:3a:cc:
4c:6d:f1:ce:3f:4d:de:2d:2d:85:97:93:93:f9:d4:
d8:81:87:fb:16:9f:30:84:52:b1:a7:3b:be:2a:d8:
d2:1d:41:93:18:a8:22:07:dc:a5:10:88:aa:c6:be:
4e:b2:67:c5:dd:fd:97:b0:ed:88:f6:c9:e2:d9:10:
97:2e:ac:a7:4c:a1:ef:ef:61:d5:66:52:0d:6d:60:
3f:ca:e2:81:93:9b:02:71:16:db:9f:51:18:74:a6:
c9:d4:fc:5c:76:4e:74:2e:8d:52:04:87:33:96:c8:
02:68:f1:7c:e7:c5:1f:b9:50:1d:75:51:ee:b7:38:
70:32:92:51:f0:64:41:47:00:60:09:ef:cd:15:49:
4a:42:19:54:a0:20:8d:ea:ac:18:c5:7f:93:ab:61:
ce:9b:8a:5b:07:ca:e1:70:4d:09:45:69:e1:3e:41:
07:5b:ee:fe:da:26:fe:8b:7e:46:b7:fa:e5:db:06:
99:ee:98:e1:a3:37:51:7b:e0:c1:49:3d:b0:76:1e:
fb:c4:92:55:6d:5e:45:61:4c:ac:60:de:b7:40:23:
d3:32:39:db:a4:f4:6c:10:fd:2d:fb:7a:28:93:dc:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:19:8A:92:37:1E:8E:D8:24:05:8D:10:21:5A:E6:34:1F:05:B9
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:79:01:b5:10:c7:03:6a:35:3d:bb:ad:ef:f3:37:6e:0b:
5c:4a:b9:cf:56:b5:7c:d2:b0:36:45:5b:c4:60:8d:43:e3:d5:
6c:0a:93:38:d7:cc:6f:46:3b:fb:c9:05:d8:b7:4e:37:51:de:
3c:0b:9d:08:05:c3:7a:a6:1f:7a:53:91:27:1e:8a:2d:dc:8a:
6e:f0:97:0f:41:37:07:6f:ab:71:70:ab:22:d9:62:96:9c:b2:
2a:95:16:8a:fd:9b:a5:3e:09:47:bf:a0:0d:6d:1c:b5:79:b5:
6e:f8:09:19:8d:de:8c:79:5f:4a:fc:7c:a3:8b:1c:5e:0a:09:
0f:c4:93:a9:71:4f:bd:51:36:6c:8e:e6:0f:f6:c3:77:3c:5e:
83:6b:53:f6:6e:b7:23:12:45:5e:69:12:f3:2c:68:00:58:cc:
61:60:51:8a:1d:8b:5b:95:53:18:2e:ec:f9:29:61:e4:ae:6b:
9e:02:5f:9e:31:6f:44:07:2f:e5:35:b8:64:60:c4:c6:92:38:
36:e8:a7:a8:f9:51:99:84:b6:30:22:e6:af:b9:ba:af:f6:7f:
d0:08:a1:9a:76:27:97:3b:25:57:50:2e:61:b4:d4:71:91:ca:
43:ef:e8:63:63:26:f6:e9:34:5a:cf:ea:94:ae:1d:bd:d4:45:
14:4c:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:53:05 2025 by rpki-client