Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier: TRX+JvI5R37QXRerUq7LFYRY9hTnZInKk6rjH9NX7MI=
Subject key identifier: 81:3F:7B:E8:03:AA:27:13:EB:47:6F:5E:2C:37:9A:14:03:E2:FE:51
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial: 019A4C6152F6CB49CC8EFE6391C2E7078C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number: 144C
Signing time: Tue 04 Nov 2025 01:00:37 +0000
Manifest this update: Tue 04 Nov 2025 01:00:37 +0000
Manifest next update: Wed 05 Nov 2025 01:00:37 +0000
Files and hashes: 1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=)
2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: YOrMIhoqxi26OstyyFaxVsY3hBmevUufj/Zxw01Q3j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:52:f6:cb:49:cc:8e:fe:63:91:c2:e7:07:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Validity
Not Before: Nov 4 01:00:37 2025 GMT
Not After : Nov 5 01:00:37 2025 GMT
Subject: CN=813f7be803aa2713eb476f5e2c379a1403e2fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:db:b2:49:5d:8e:3e:28:a2:3c:65:fd:8b:
b4:cb:53:db:62:a7:8e:39:71:f0:95:3b:11:dc:83:
45:f4:7a:e0:2c:f8:5a:4a:b9:18:02:6c:8c:25:8d:
b0:58:74:80:6c:25:ed:55:79:85:ac:5a:3c:3a:2d:
c4:31:71:88:10:ba:4d:ab:60:d4:b2:44:b3:7a:1f:
d1:1d:92:d4:a6:43:3b:ff:28:57:a8:2e:b5:44:69:
ac:e3:62:d7:6e:20:f1:01:b8:4d:90:c7:45:63:7a:
11:6e:29:b3:bf:f4:11:d5:75:cd:ac:27:3d:01:d7:
f8:c8:77:ca:61:ce:c0:c1:3b:0b:4c:b9:11:ed:1e:
b3:e7:62:1f:8e:4b:be:ce:9b:2d:b1:65:60:69:eb:
b0:e3:51:ee:29:75:ad:e4:98:31:f7:47:9b:66:b7:
4d:b3:47:35:1f:ef:15:7f:30:87:8b:be:70:fc:7c:
6e:78:fd:78:09:28:be:a6:40:f2:db:65:7b:75:6f:
48:d8:7e:3d:e8:88:12:4e:b1:0e:ab:02:63:bd:87:
6a:58:a2:65:6c:69:dd:79:da:3c:9e:43:27:3b:41:
dd:d2:10:c1:d7:a8:73:0a:62:5d:e1:a1:60:03:b3:
cc:49:0b:ea:af:52:eb:83:21:65:92:64:f1:99:a7:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:7B:E8:03:AA:27:13:EB:47:6F:5E:2C:37:9A:14:03:E2:FE:51
X509v3 Authority Key Identifier:
keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:a6:af:4a:a7:2d:b3:5d:f4:6b:be:8d:bc:66:74:3f:ec:
4c:74:c5:89:d7:68:86:53:1f:60:97:53:32:c5:f4:a2:57:c4:
a2:67:01:3d:33:97:d1:6f:89:72:e4:e5:6b:e4:e0:ae:9b:54:
f7:91:22:00:d9:55:8b:2c:da:8d:86:f3:5f:2a:2f:2c:05:ce:
ea:ac:44:81:32:1f:ac:4d:1e:06:5c:3a:62:8e:b9:24:9c:11:
51:16:df:77:ab:d1:dc:e4:2b:bd:98:ea:34:85:b8:dc:19:56:
8a:c9:e9:e9:cc:ec:85:49:1d:8d:e5:78:68:3b:b2:a9:9d:e0:
1f:3f:c1:49:1c:1c:5e:e5:4a:b1:ea:1e:4b:e4:df:c7:64:d6:
9c:d2:d5:9c:e6:ca:50:a5:57:a0:4f:f0:aa:f9:f2:c5:55:9f:
6c:4b:d9:85:1a:ab:ca:5a:32:01:04:56:a3:07:c6:e7:4b:66:
2c:ea:80:47:dd:a3:b6:0c:fb:a0:c0:84:c1:7a:22:64:0d:52:
cf:26:9b:af:ed:4f:ad:a1:d9:77:61:31:19:92:c9:9f:c3:94:
22:cd:8c:06:be:e1:cb:11:70:91:4c:40:68:fc:61:f5:70:5d:
a7:ed:c2:5c:8a:7a:0a:4f:00:e7:7a:ab:d0:f0:e0:c9:97:b7:
9d:10:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client