Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: qeTJGuI2J9euchqYXwf/BQ/pcICQsCSt+ocpS3v0u7Q=
Subject key identifier: 4E:98:12:CB:1D:97:61:A7:AF:CB:ED:44:65:5A:AD:B8:DD:97:36:05
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019A4C9870AFC2B6911751DE3C42FF71A708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 1494
Signing time: Tue 04 Nov 2025 02:00:49 +0000
Manifest this update: Tue 04 Nov 2025 02:00:49 +0000
Manifest next update: Wed 05 Nov 2025 02:00:49 +0000
Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: pbeRfhum2jEZKT7oz9N2F6Z64mJTF3NueRVnH3dQns8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:70:af:c2:b6:91:17:51:de:3c:42:ff:71:a7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Nov 4 02:00:49 2025 GMT
Not After : Nov 5 02:00:49 2025 GMT
Subject: CN=4e9812cb1d9761a7afcbed44655aadb8dd973605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:02:28:01:b3:3c:af:bf:f1:37:84:56:49:
be:72:60:8e:f2:59:68:6a:6a:85:5b:2f:16:b2:b6:
20:d1:76:1d:3c:ca:7c:40:74:ef:df:3c:57:58:66:
6a:5d:a7:10:74:57:d0:b3:1c:7a:5a:ec:73:76:d2:
2c:c6:56:11:a9:65:e5:19:18:4f:45:41:33:0a:5f:
b6:af:2d:03:36:5b:e4:3c:2c:e2:c1:c5:c3:d2:33:
48:88:39:b9:45:7c:a9:fd:7e:27:fb:21:24:25:2e:
8a:5e:9e:c9:dd:3b:50:86:36:94:0e:0e:bb:19:80:
0b:05:46:51:4b:9a:6e:41:d4:d7:7e:69:93:16:79:
11:3a:f6:2c:06:3b:6b:31:ea:9e:46:b9:12:ef:b3:
35:93:2a:12:1f:4b:bb:fd:0d:bb:28:07:78:c5:f9:
0a:0b:76:ad:78:35:91:86:4a:d6:e4:b7:be:fa:eb:
1b:3b:3c:18:b6:ff:3d:96:62:74:42:0f:6c:f3:27:
aa:e0:2e:d0:39:0a:bc:02:09:f7:b9:7e:5d:c8:c9:
38:e5:c8:b2:dd:cd:3a:27:f0:10:57:10:04:1d:ec:
9c:9e:72:12:0a:c1:b3:d2:35:7e:7c:8f:4f:d6:eb:
81:8c:0c:dc:57:6d:33:42:e6:9d:70:68:03:e9:2f:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:12:CB:1D:97:61:A7:AF:CB:ED:44:65:5A:AD:B8:DD:97:36:05
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:0f:1b:2d:0c:ba:f5:99:2b:b8:8c:4f:c8:c9:35:3d:24:
4f:77:e9:40:e9:29:e0:ca:2c:f4:85:fb:99:93:71:14:72:31:
03:47:b7:59:c3:bf:d8:3d:c0:96:4f:62:a6:39:d5:e7:20:4e:
4b:2e:b2:52:18:cb:f9:83:10:7f:a2:b6:84:59:b0:6a:19:e6:
cb:79:7c:a9:df:f2:70:5c:b7:d2:9a:49:0f:03:54:63:3f:3b:
e0:05:13:fe:e7:c0:17:49:eb:51:87:bf:5a:fd:e2:6b:2e:7a:
10:84:7d:39:0f:8e:41:fd:c3:83:59:a5:1a:7b:63:61:f2:cc:
c1:2b:b0:1e:e0:c8:f8:9e:94:4d:7f:f3:15:e7:e6:95:a9:84:
0e:cd:d5:2c:21:2a:b2:40:ed:56:11:fc:40:0c:26:cc:7b:20:
83:71:21:a6:55:77:62:d2:92:2b:cc:1f:08:0a:ff:a2:d6:57:
f3:10:2a:30:28:45:15:01:db:8f:7b:89:48:48:88:24:d2:a8:
5d:2d:1b:f9:e5:fe:f0:6d:ba:6c:51:a5:6d:32:53:8e:33:f9:
12:be:d9:be:54:00:e5:fe:d6:b7:f3:87:0b:dd:fd:9e:8a:f9:
48:3d:01:55:e7:69:18:d5:4c:7c:cc:bc:50:50:47:6b:96:d2:
7e:53:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:23 2025 by rpki-client