Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: tysK7nM5KAjbPBuy8foIoxqCYLvQMZpZgpON2Csf7W4=
Subject key identifier: 70:1D:A2:76:66:B9:98:01:EC:7A:9C:A8:8A:B8:69:D0:AD:CB:FD:EB
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019A518793CD9949A9AA24767B93BF16FB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 8A
Signing time: Wed 05 Nov 2025 01:00:30 +0000
Manifest this update: Wed 05 Nov 2025 01:00:30 +0000
Manifest next update: Thu 06 Nov 2025 01:00:30 +0000
Files and hashes: 1: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: W0sQanJpRjwwasZpVE0vmgVAlJ/kvU6zvMtEqovtcdE=)
2: zIaCxLUjq21dOPZ6oricOQf9_f8.roa (hash: lDpgOF97BKIlMEFYdLb+3oy7Ebe7Mk1d7MHbR+tgmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:93:cd:99:49:a9:aa:24:76:7b:93:bf:16:fb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Nov 5 01:00:30 2025 GMT
Not After : Nov 6 01:00:30 2025 GMT
Subject: CN=701da27666b99801ec7a9ca88ab869d0adcbfdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:41:a7:ad:da:cf:da:43:a2:6a:95:03:89:
f1:71:f4:89:fe:41:e1:55:f0:d8:37:d3:bc:87:0b:
24:cf:f4:6c:d9:c8:05:4e:be:2e:b0:b6:44:ea:47:
23:16:81:98:db:51:98:58:0d:2f:e2:8f:56:c3:d9:
19:29:f6:a4:ab:56:2e:c4:c7:58:b9:ae:7a:a3:b0:
eb:fd:01:a4:f3:39:56:ab:c8:06:7b:cd:47:1d:93:
4f:db:88:52:d0:cf:4e:67:71:30:33:ae:2a:4e:da:
ae:a8:96:0b:a5:11:23:a7:73:14:39:0e:0b:21:cc:
e1:6c:61:d3:40:5d:86:77:1a:fb:2c:48:73:e9:64:
42:f6:05:a7:ea:64:8a:39:5c:c9:68:f0:bd:28:8a:
d4:cd:9e:c2:5e:bd:39:a5:79:d7:38:eb:ed:42:8b:
ab:b2:76:5d:78:8e:77:25:40:7d:e4:1f:4b:cd:e9:
18:6f:3d:b5:2e:a2:78:40:6b:60:4b:f5:a0:b8:81:
a7:ad:32:f2:c5:36:83:eb:ac:8c:c9:af:31:44:6a:
8a:55:7d:38:4f:7f:7e:8a:db:62:c1:30:00:fa:d1:
c5:7d:9a:57:e0:87:2a:6c:6a:95:fe:2b:f6:c7:a4:
e4:07:f1:51:1a:ef:fa:10:15:1b:98:95:60:e8:87:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:A2:76:66:B9:98:01:EC:7A:9C:A8:8A:B8:69:D0:AD:CB:FD:EB
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:77:ee:90:29:81:81:a6:84:d8:c3:7d:e1:1c:0f:97:57:
71:cd:64:4d:d8:db:ae:fc:9c:77:9b:3a:c6:3a:20:24:ea:41:
32:90:c3:8f:c7:24:4e:92:35:27:c6:40:ea:d6:3a:ae:88:7f:
51:43:17:9f:fc:64:fa:aa:28:a4:38:33:87:07:8e:ba:d2:f2:
1e:81:08:a6:07:de:ea:26:c4:20:2c:71:67:b6:2a:cc:d4:5e:
81:93:29:db:d7:a8:66:15:90:f9:3a:bd:2a:d4:42:1e:2e:70:
91:85:43:5c:db:7f:a9:b4:d6:bf:11:eb:18:a0:e3:1a:4e:06:
86:7f:91:fc:33:30:82:0c:66:72:65:d5:a0:71:6f:d3:5a:c9:
41:ed:01:98:7c:f4:5c:73:eb:96:50:23:67:f2:54:5e:35:43:
c7:b7:c6:5d:0e:9b:a0:65:00:ff:16:ba:23:29:e4:a4:ff:62:
35:19:9d:be:f2:d0:17:fd:58:87:c4:6a:72:e8:30:f7:78:0f:
c9:c5:ba:8d:bd:83:45:e3:5c:fc:d3:36:33:d3:1a:82:9b:48:
87:62:f9:f8:6b:94:d4:45:19:de:c4:37:03:9d:a0:70:bf:23:
ca:84:1f:5f:5b:b0:8c:3a:bc:8c:22:e9:56:a2:af:92:b0:96:
eb:9e:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:22 2025 by rpki-client