Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier: pAJgd3zL+4rEndGPreYXKLgzG9ixtPnz70rATgYD+ZM=
Subject key identifier: 43:54:1A:F8:AD:46:F6:13:71:5D:A9:EA:E1:B7:11:85:CD:D2:59:3C
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 019A4E4FB64735CD8CE0483E438CBD6E617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number: 0A59
Signing time: Tue 04 Nov 2025 10:00:38 +0000
Manifest this update: Tue 04 Nov 2025 10:00:38 +0000
Manifest next update: Wed 05 Nov 2025 10:00:38 +0000
Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: qw6jKyJMLmTkFaOG+d5KYG95kk//a4yxgyyAVnFrU20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b6:47:35:cd:8c:e0:48:3e:43:8c:bd:6e:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Nov 4 10:00:38 2025 GMT
Not After : Nov 5 10:00:38 2025 GMT
Subject: CN=43541af8ad46f613715da9eae1b71185cdd2593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:08:21:0b:98:d1:02:2e:fe:67:af:d2:eb:
10:00:65:74:c9:fe:fd:d0:71:7a:dd:d3:b8:3f:f8:
ec:16:4e:7a:13:9c:47:66:db:9c:1a:72:40:d3:16:
04:fb:91:b4:aa:3c:12:a0:8c:c5:42:e0:45:5a:27:
74:3f:f9:9b:51:bf:31:c5:38:f3:57:f0:46:4b:a8:
ae:9e:05:40:e1:74:83:db:8b:81:d5:7a:a7:7d:8b:
89:60:91:22:ec:02:06:58:86:cf:81:5c:39:01:6e:
72:82:3e:ff:a1:00:f4:95:dd:6d:e5:df:99:3e:d1:
80:6c:dd:83:f4:81:b6:af:76:e0:ce:16:5b:a0:41:
68:8d:8f:ea:db:a9:58:bd:ef:2c:58:65:07:2e:98:
68:58:cb:a8:08:b9:03:93:ee:3d:3d:49:11:b5:be:
c6:ea:81:8f:e0:63:92:31:6e:4c:32:9d:ec:f4:2f:
12:47:17:25:5e:ed:f9:7f:ae:11:c5:94:bb:1c:30:
3d:81:46:2e:10:d4:89:4f:ae:0a:07:5d:98:95:64:
e8:8d:75:13:43:41:eb:17:13:8b:f0:1f:60:19:a4:
d1:77:52:b1:73:fe:b1:9d:96:c4:ab:0e:1b:bf:e6:
93:67:83:ae:d2:79:9f:d6:0c:23:fe:11:9c:83:e6:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:1A:F8:AD:46:F6:13:71:5D:A9:EA:E1:B7:11:85:CD:D2:59:3C
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:81:93:da:fb:50:39:4b:c2:02:29:74:82:f0:5a:24:a8:60:
e4:1a:c6:d1:41:2f:49:e9:f8:ba:6d:f5:a7:7a:93:06:b2:61:
86:9a:e0:61:fc:84:fd:c7:f7:1a:75:1e:71:62:bf:82:ac:55:
9f:52:14:30:cf:6a:7b:6b:d5:3f:82:e5:30:47:34:bc:ec:10:
fd:ad:8a:97:24:f5:69:ee:ed:21:e6:53:95:6b:0b:a0:39:ac:
51:5d:7f:b5:27:9a:56:90:28:23:83:48:16:31:80:d8:ae:f1:
66:18:92:6c:e9:1c:5b:5e:50:64:c6:29:57:76:73:68:ca:95:
9f:f5:41:9e:83:17:e1:8d:8d:af:9d:16:67:99:b7:f6:a1:3e:
26:78:45:ea:94:11:1b:d9:5a:da:be:59:d5:c8:37:83:db:96:
c8:23:4f:a7:60:da:dc:18:f1:dd:10:8f:d0:3c:0f:91:5c:cc:
60:b5:ab:cc:5d:b6:07:dd:3d:0e:c2:b4:61:69:9c:5a:00:45:
fe:7a:b4:ee:8e:50:3e:b0:d2:cd:37:03:7a:d6:da:a3:3d:b5:
01:dc:b4:1a:5b:5b:16:f1:e5:b7:1a:9c:49:13:de:6e:b6:40:
ac:bc:28:b6:a7:73:1e:62:7b:47:c0:29:68:22:4c:cc:b6:42:
6b:63:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:26 2025 by rpki-client