Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: dvlVMuaLR4K0fVHnP8ChDGpic9L99W65pdY0FfhqnUo=
Subject key identifier: E5:4A:D5:71:CA:47:E0:1E:A8:FA:CC:9F:67:11:2B:53:93:9C:41:01
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 019A503E1C500886889D6808BB0B17ACD644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0B98
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: yLcL9xFGDWCPrAZRiX6XXmkrCfqdu7GkniZ47sKrIQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1c:50:08:86:88:9d:68:08:bb:0b:17:ac:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=e54ad571ca47e01ea8facc9f67112b53939c4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:35:53:45:02:ed:ba:f0:49:c8:33:dd:6f:
4e:38:fc:fa:ff:b9:f5:e6:d4:64:b3:d5:95:0f:3f:
e2:17:09:2e:84:ba:d5:29:99:1a:65:09:06:89:67:
dc:04:1f:f8:85:db:31:5e:bd:23:4c:ca:dd:6a:e2:
a3:09:34:75:d8:a2:2a:78:d6:1b:15:dd:24:d5:f5:
11:cc:54:63:ee:2a:5f:9d:2b:3b:b5:2a:f2:a0:f2:
b0:33:78:e4:c4:27:90:7e:6c:02:25:40:56:6a:a2:
fb:a8:be:db:22:84:1d:38:18:af:a6:57:cf:22:0b:
6a:9f:d0:59:40:b2:35:08:8d:b1:ae:94:de:8b:34:
4b:d1:51:04:8c:35:1c:50:54:00:f6:aa:a9:9e:4c:
ad:02:7c:ba:b2:41:c8:5f:58:85:a9:3e:6f:c7:cc:
34:cc:08:b5:6c:66:4e:0a:80:53:98:e3:3c:d3:2a:
a9:8c:fe:16:d1:01:3c:e7:21:ba:e5:87:08:36:d3:
bf:57:5e:b2:f9:51:d8:b0:f8:bd:a1:bb:78:1a:67:
21:8d:35:6a:c6:8d:d4:e1:e1:ff:32:b3:17:f7:ad:
19:fe:22:0e:4e:85:89:f8:ad:d9:36:a4:03:90:28:
35:26:f9:59:0e:4f:97:8c:15:46:fb:13:aa:28:c5:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:D5:71:CA:47:E0:1E:A8:FA:CC:9F:67:11:2B:53:93:9C:41:01
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:77:c0:bc:f4:cf:5c:8a:5c:d0:31:82:28:83:d8:ed:15:fa:
9e:08:56:8e:9a:77:4e:35:37:08:9f:14:19:b2:67:c7:1d:6f:
44:3f:42:b3:5e:f9:84:f1:96:81:fe:68:31:81:0c:8e:9c:0b:
05:75:df:e6:62:a5:a3:7b:9b:41:f2:6e:2e:60:d1:ca:03:1c:
d9:0b:1c:b5:3f:f5:d8:b8:91:86:47:b3:93:38:e5:60:3a:19:
60:21:94:8f:56:94:91:da:28:24:c1:7f:20:c4:0a:88:94:29:
93:81:dc:73:11:db:b8:10:26:3c:b5:99:72:32:7d:c0:aa:e3:
67:63:18:96:cb:d4:ac:d6:f4:13:d3:76:70:85:f9:15:1c:cd:
3f:83:17:7d:34:25:c6:0a:fd:4a:4b:3e:7e:a2:35:4b:fa:55:
1b:ce:a8:c9:58:d0:b3:01:60:a6:a8:d6:25:bc:31:16:7c:f8:
2f:55:15:e0:e6:1e:95:15:b0:14:79:47:a5:bc:93:d8:79:11:
d6:1b:c0:72:2d:f4:17:17:a7:fa:b0:f2:51:92:85:4c:7d:46:
84:e9:a8:9c:a7:6b:39:b5:49:3f:71:35:f9:c0:60:6e:65:a3:
85:e6:bf:8d:7a:a5:2e:fb:01:90:fb:7d:ab:07:0f:a7:86:52:
22:30:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:27:47 2025 by rpki-client