Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: /T8hSsIcN22Y1GdXjRwzWkmD/eUjkYmKOg3/VloXWck=
Subject key identifier: 69:08:CC:CA:6C:25:55:74:F4:E4:D8:61:1F:43:48:56:71:A8:C4:CF
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 019A503E0ECBCB15F16CBC60512022F1D258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 07D5
Signing time: Tue 04 Nov 2025 19:00:35 +0000
Manifest this update: Tue 04 Nov 2025 19:00:35 +0000
Manifest next update: Wed 05 Nov 2025 19:00:35 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: Pc4mbiLkiveUvRkCKcOzD6UHjFfjdIeI/tnKsLXv0TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:0e:cb:cb:15:f1:6c:bc:60:51:20:22:f1:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Nov 4 19:00:35 2025 GMT
Not After : Nov 5 19:00:35 2025 GMT
Subject: CN=6908ccca6c255574f4e4d8611f43485671a8c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:6e:5a:aa:fd:62:4d:0d:70:8e:23:f2:13:
4e:2c:33:4d:c6:58:d6:39:71:6e:44:b6:8b:6e:97:
c9:a7:16:c2:b5:d0:d4:d0:0e:e3:bd:00:28:0e:f6:
00:42:dd:f6:4b:ef:b4:87:ca:5b:a8:4d:5d:db:3e:
43:50:fe:8e:7a:91:77:9b:69:a6:e9:44:e3:f8:fb:
2f:5e:0a:8b:c8:2b:df:ee:a5:ae:88:70:6f:db:aa:
a4:80:1a:ad:89:1b:13:3c:b3:ec:64:82:c6:f5:07:
b1:cc:f2:36:eb:c0:4a:ef:17:4c:35:70:a6:60:c6:
9b:1c:82:b9:88:8a:8f:bb:eb:c1:4a:04:1e:63:3f:
3b:37:d0:15:a3:86:b2:bb:90:5e:aa:ce:99:a2:ed:
c5:77:f0:68:82:0e:29:39:50:b2:af:a4:1b:fd:90:
20:59:57:0d:77:65:79:13:46:dd:2b:0f:9d:6e:49:
97:64:54:55:1c:ae:14:0b:76:75:e1:22:1d:2c:a2:
4a:e8:36:16:e6:1c:bc:85:67:8c:f9:64:0e:5a:95:
37:65:ec:da:df:6f:14:8c:75:bd:81:5f:c9:1f:06:
13:05:17:ff:38:be:76:c1:56:82:3e:6c:0f:9e:5d:
19:ad:7a:b8:b5:72:36:e2:b7:5d:e3:82:4c:2e:eb:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:08:CC:CA:6C:25:55:74:F4:E4:D8:61:1F:43:48:56:71:A8:C4:CF
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8f:05:52:34:08:e8:80:0c:fa:fc:30:b6:08:22:80:52:3b:
d4:51:22:78:f6:90:0b:20:06:a7:10:de:7c:72:56:97:8d:88:
04:36:ff:5f:51:28:7c:e3:07:56:cf:d9:6c:3c:e5:78:98:4f:
db:4b:83:34:3a:60:74:fb:e3:03:e4:d4:cd:88:f3:05:fd:fa:
ce:ae:51:ed:30:f7:08:15:48:f6:67:95:c3:17:f8:08:91:f7:
3c:b0:28:e4:54:46:08:70:59:5a:7f:ef:99:08:6f:f2:3f:bc:
d6:23:8b:41:47:5b:39:56:28:9e:bf:da:88:05:7f:42:88:48:
f3:24:98:f2:ce:1e:76:79:a2:7b:55:93:90:dc:77:45:9e:3f:
d4:18:db:56:07:d7:39:3b:71:2b:96:62:d9:34:d5:6c:fb:b5:
26:09:e1:c7:ab:01:54:38:83:42:61:24:d2:fa:b6:be:04:31:
85:e8:7c:9c:23:68:e4:ac:6b:c4:be:fb:ff:d9:7a:64:39:9d:
23:9b:6c:bf:eb:a9:24:a0:b4:28:18:61:12:9b:cd:c7:2a:4c:
39:89:ef:ba:42:ef:aa:06:d9:63:60:34:8e:99:13:3e:f2:57:
3d:39:18:af:60:7a:01:c6:31:1b:dd:e2:f2:e2:ba:5d:73:f7:
a6:21:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:21 2025 by rpki-client