Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: XukWMus/UYHySXcZXXESkmO7u41F7v6Vg4g3lif2rbc=
Subject key identifier: 31:22:CC:91:D4:92:CE:7A:24:74:93:C2:ED:F8:52:42:77:DB:3F:E1
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019A522C19AB662251A91BFA566586340174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 0215
Signing time: Wed 05 Nov 2025 04:00:13 +0000
Manifest this update: Wed 05 Nov 2025 04:00:13 +0000
Manifest next update: Thu 06 Nov 2025 04:00:13 +0000
Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: 3YwrSkIx1N+MXZde5eUZ5Nv5Zbf4gplXRoPdmw10nsU=)
2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:19:ab:66:22:51:a9:1b:fa:56:65:86:34:01:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Nov 5 04:00:13 2025 GMT
Not After : Nov 6 04:00:13 2025 GMT
Subject: CN=3122cc91d492ce7a247493c2edf8524277db3fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:da:a9:a9:da:e5:31:25:51:0b:48:11:5f:
7f:5b:47:5d:3f:f1:cc:fc:1c:06:f8:95:d6:b1:a5:
e2:fc:60:62:61:c3:5f:c0:0b:79:58:43:15:45:6c:
05:52:bc:37:22:8c:34:bd:3b:3e:4b:08:8d:23:17:
5b:19:cf:9e:bd:36:9a:0c:9e:9c:18:5b:46:e4:a2:
09:db:20:10:9d:92:09:cc:0c:c6:f3:30:0b:cf:9f:
be:eb:b2:19:4a:a6:90:0d:ea:af:25:c2:dd:99:b5:
74:b3:5e:32:9b:47:f9:c4:3c:43:73:79:47:32:b9:
3c:f3:1c:13:bc:4b:79:81:89:e8:be:78:11:ee:12:
b7:f2:47:c8:b0:ce:c9:15:0e:52:d1:81:84:9d:5a:
b7:05:3f:d5:d2:27:3b:cf:f4:3f:89:ab:c9:8b:9d:
9b:7f:14:e8:b3:15:d7:e8:18:67:42:64:b0:a3:ca:
be:bb:d7:75:6c:e2:ca:77:4e:b3:92:15:09:d3:b5:
ed:c5:66:29:19:d4:1a:97:ef:e1:39:8e:57:bc:9d:
21:3e:76:96:5f:4f:21:3f:d8:cb:db:57:47:14:66:
9b:62:1e:1c:fd:f0:d0:6c:bf:ae:21:8b:fc:3d:0a:
a9:12:2a:0d:a9:7a:69:e2:08:22:23:0b:fd:1f:e9:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:22:CC:91:D4:92:CE:7A:24:74:93:C2:ED:F8:52:42:77:DB:3F:E1
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:0f:cb:9a:2a:0c:93:d5:f5:30:b9:f1:62:c2:fe:f7:bd:
d7:45:05:17:4e:73:2f:2a:34:52:65:82:16:f9:1a:0d:e6:bc:
cf:e7:ab:4a:a0:e8:a4:93:9d:60:f2:68:68:65:29:10:2e:a4:
dc:78:b2:74:2c:85:0f:af:fa:ac:b2:87:01:63:01:25:4a:d1:
a9:7d:bb:61:07:22:a0:2f:46:51:2a:43:3c:9a:50:aa:67:6f:
d1:99:7e:68:42:bb:dd:4a:6c:e7:fe:b5:46:84:17:35:98:38:
0d:9b:68:e7:14:c5:ed:39:5b:38:ad:ce:4d:0c:a5:a1:02:a3:
67:26:0d:c2:16:66:b3:4e:2f:bd:93:5e:97:1d:8a:a0:b3:c3:
8b:d8:7b:ee:ce:e6:0d:c0:9c:30:73:26:e0:62:7e:6d:26:f4:
7a:33:f2:9f:4d:71:6c:e3:df:e3:91:1b:fc:a4:0d:aa:89:f6:
82:e6:26:79:3c:b4:df:59:01:be:a0:e9:d8:b5:b0:ad:63:0f:
54:2d:6d:48:dc:55:9e:10:50:eb:3d:7e:e4:d1:70:bb:3d:d8:
64:97:37:b8:2f:eb:d5:a7:58:48:c6:d8:5e:c3:da:51:ae:2e:
3c:33:3d:f7:48:3e:d4:fa:b7:7f:78:f0:c9:19:ec:6f:0d:2f:
6d:d4:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:53 2025 by rpki-client