Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json)
Hash identifier: iBUHVu+h1dEtvbqaX5Ohamq8BB+IGstOmoHmKj/V4T4=
Subject key identifier: 5C:54:6B:26:9E:B7:2D:13:ED:30:DE:E2:38:82:29:CF:EA:15:B3:49
Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276
Certificate serial: 019A4F2AE8DE35E7F553F487C35CBE853145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
Manifest number: 0FD7
Signing time: Tue 04 Nov 2025 14:00:03 +0000
Manifest this update: Tue 04 Nov 2025 14:00:03 +0000
Manifest next update: Wed 05 Nov 2025 14:00:03 +0000
Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: VHjC0Wb+WmTfvdWcLqaFZzgrqF0tW+YrktncLUIeE8Q=)
2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:e8:de:35:e7:f5:53:f4:87:c3:5c:be:85:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276
Validity
Not Before: Nov 4 14:00:03 2025 GMT
Not After : Nov 5 14:00:03 2025 GMT
Subject: CN=5c546b269eb72d13ed30dee2388229cfea15b349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:dc:1c:0c:d0:c7:5e:61:0c:f6:00:46:a3:
0a:0b:1a:1c:ca:14:d5:74:df:a1:f7:a4:a2:28:4a:
7e:dc:98:6e:2f:07:3c:3d:a4:d0:f6:13:83:fe:9c:
7e:5d:d3:e8:44:5c:b3:00:05:b1:98:68:85:2a:92:
6e:74:6b:2e:e5:c0:9c:9c:22:3a:52:55:51:b5:43:
bb:03:21:05:49:af:66:ad:08:c1:da:34:ab:bb:31:
75:e3:ed:63:f1:88:d8:f2:fe:d0:7f:42:2b:f2:1b:
5d:35:3d:b0:c4:d7:ff:18:ee:a6:ee:da:90:3f:7c:
3f:a4:78:d6:23:77:12:f7:cd:f2:01:76:99:e1:28:
83:90:ff:83:7b:82:96:2d:c0:61:0d:68:c7:26:e5:
98:cb:26:d2:e3:1b:ed:01:88:71:48:63:01:d0:66:
2b:ba:5b:87:71:c3:0d:3a:e7:6e:8e:1b:10:d6:0b:
a3:ef:a6:bb:31:b7:58:23:f2:ec:5d:73:99:cf:7f:
23:2d:25:1f:39:47:8a:20:fe:d2:fb:3a:7e:4b:d1:
a5:d3:dc:d1:b5:9f:7f:c4:99:7f:9f:97:cf:6a:41:
bf:63:09:ca:ce:f0:01:31:dc:e7:b7:52:ca:9d:96:
00:7a:15:51:7d:8c:fd:4a:7b:c0:af:76:ca:41:72:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:6B:26:9E:B7:2D:13:ED:30:DE:E2:38:82:29:CF:EA:15:B3:49
X509v3 Authority Key Identifier:
keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:95:fd:e4:02:11:26:92:16:a6:7e:d0:22:7f:ae:bd:72:
47:44:44:f1:c5:0a:16:0c:b9:d3:b9:e1:5d:28:86:ea:34:69:
57:52:d5:72:01:40:26:6a:5a:e4:b0:f1:b6:18:c3:4f:1f:5f:
46:27:c8:89:48:17:01:bc:d1:08:66:47:51:1e:de:83:63:3a:
3b:c4:05:7c:77:21:56:f3:a0:5f:69:0a:50:d9:97:64:e2:6b:
51:3d:be:68:e9:fb:ff:b7:85:bc:dc:6d:0f:43:8b:68:39:f4:
d0:a1:87:4f:b8:3c:a4:7b:e1:bc:dc:ec:5e:c0:89:b6:20:1a:
21:e7:12:6e:bf:0a:6c:7a:fb:76:83:d1:16:11:d0:99:6d:aa:
0a:6c:79:a5:cb:c8:91:47:58:f6:ce:ab:ff:ad:8f:15:f7:0b:
7f:a7:14:3e:f5:d9:2a:b2:34:22:52:c8:fe:de:b0:6d:8f:5c:
d8:16:53:1c:9a:b9:d8:79:4a:10:5e:fa:ab:b8:ee:6d:e7:cd:
6b:fd:d8:d3:d1:22:3c:a2:ff:bb:21:58:29:ff:d1:9f:36:76:
0c:7e:9a:24:79:c4:bc:9f:09:9c:3f:2f:fb:9d:b2:dc:fc:94:
f2:79:cf:8f:67:ff:45:dc:0a:de:89:69:4a:45:05:f2:ec:5d:
56:82:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:58 2025 by rpki-client