Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: FZjfELw4Hacysr95kVcrH1G0QkTYrpDMHfotst2RdqI=
Subject key identifier: 80:94:C3:1B:51:6E:1F:F5:5E:E8:83:1A:72:E6:7D:2C:11:A4:35:76
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019A4C9864BC25C0428B18D51CFCD19A6423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 13EC
Signing time: Tue 04 Nov 2025 02:00:46 +0000
Manifest this update: Tue 04 Nov 2025 02:00:46 +0000
Manifest next update: Wed 05 Nov 2025 02:00:46 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: C/LbV1lycFF53+CaSH6URyoQTLDhLSy/kQUvgfjcKJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:64:bc:25:c0:42:8b:18:d5:1c:fc:d1:9a:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Nov 4 02:00:46 2025 GMT
Not After : Nov 5 02:00:46 2025 GMT
Subject: CN=8094c31b516e1ff55ee8831a72e67d2c11a43576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:a1:47:60:fc:61:64:e6:12:4e:45:df:62:
bb:f1:dc:da:fc:43:d8:17:ac:bb:bb:0d:be:81:d2:
be:26:c3:bc:54:fd:6c:e9:d1:af:36:e7:d3:29:e1:
9e:ad:eb:e0:a5:41:31:12:a2:fe:08:81:09:1a:e3:
31:fc:77:86:21:7d:8d:4b:3c:a9:b9:5d:94:64:15:
76:ba:aa:93:6d:a8:94:70:df:8f:89:24:2f:4b:d9:
a2:b4:5e:64:29:0e:15:8f:72:1b:aa:14:bc:89:10:
8d:69:33:98:bd:13:9a:69:1f:90:e0:fd:76:72:5a:
40:0d:3e:c1:60:78:b5:ac:47:77:0b:35:2a:25:32:
43:31:1b:d4:76:aa:81:78:57:d8:1a:09:79:f5:d9:
00:4c:90:b2:44:d7:31:ad:ff:39:66:d3:c5:3d:38:
24:60:e5:16:70:3a:85:c1:de:41:b6:61:66:97:f4:
0e:ff:6f:30:ef:97:c8:0c:96:ea:f0:9d:a9:d5:55:
f6:21:57:58:4a:a0:66:1e:df:de:33:25:1a:2c:07:
0f:dd:7c:03:a0:97:36:fd:b2:b7:3f:5b:b6:4e:73:
8a:7e:80:41:a7:99:7a:94:e7:94:35:e2:51:0a:02:
eb:e9:a1:8b:ba:02:c0:aa:41:1a:7f:d2:d7:3f:06:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:C3:1B:51:6E:1F:F5:5E:E8:83:1A:72:E6:7D:2C:11:A4:35:76
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:41:ea:24:09:35:78:70:4b:53:2d:0b:92:ae:c3:8a:a2:9a:
3d:bf:cd:d7:71:fd:23:6a:b0:ab:d5:ce:4d:e9:cb:ed:c4:68:
1f:35:fd:2d:c1:61:a2:35:e0:ea:1c:f2:bb:99:55:09:11:93:
9f:b4:d0:ff:f4:1b:93:ed:fb:f1:32:05:ab:f6:81:e9:11:45:
88:dd:d6:11:94:26:c9:0d:78:68:11:f2:fb:59:7f:6b:b7:48:
e2:ef:07:77:95:73:fc:0d:12:e9:a1:8c:64:5b:fa:ea:7f:53:
12:0d:64:19:02:b5:4c:55:c3:11:73:72:5a:23:0f:f2:28:e5:
c1:02:b1:a8:f9:4a:7e:c7:84:b2:18:20:2e:50:44:db:0e:e2:
44:99:c5:a4:28:76:71:a1:68:53:67:03:bd:29:39:ef:3c:1b:
10:19:d7:06:5b:a3:84:6e:8d:ff:c7:60:48:3a:e2:9d:bb:8e:
ca:7a:8a:14:d0:c7:5f:5c:76:d8:f1:3e:90:ae:da:e3:3e:80:
05:4f:97:1b:bb:d8:a2:80:22:aa:17:47:53:df:f8:aa:c4:d6:
e1:36:56:8d:8a:86:53:95:2a:62:62:72:b0:f8:5d:b4:b3:ed:
28:b8:6c:ff:cf:7b:00:a2:2c:69:c3:4b:1d:2a:2f:ac:70:ee:
b7:30:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:57 2025 by rpki-client