Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: cNNItL7mkOst/kJGNobhkWRDpoznDkVu8APXwcuEymE=
Subject key identifier: D3:25:8C:81:B6:AB:A0:2A:A8:55:52:46:6D:89:6B:96:9A:AB:91:4B
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019A50E2DCD07EB2687C0C07A4BAEC909DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 13B9
Signing time: Tue 04 Nov 2025 22:00:36 +0000
Manifest this update: Tue 04 Nov 2025 22:00:36 +0000
Manifest next update: Wed 05 Nov 2025 22:00:36 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: ITthZ9stuJ0ZVTJLmmLoW6m1u0VjcMUCkp/BLBAINuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:dc:d0:7e:b2:68:7c:0c:07:a4:ba:ec:90:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Nov 4 22:00:36 2025 GMT
Not After : Nov 5 22:00:36 2025 GMT
Subject: CN=d3258c81b6aba02aa85552466d896b969aab914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:91:37:4e:cc:07:14:3a:8b:a1:7a:bd:93:
d7:18:e4:f3:c6:aa:24:cf:24:71:cf:40:3a:e8:29:
28:d6:3d:94:60:53:e5:cb:46:f5:4f:c4:6b:3a:e2:
fd:bd:70:0d:5f:08:b4:8e:df:3b:1a:09:d7:17:f3:
2b:b3:ce:02:b9:2a:f7:17:75:8b:33:95:89:bc:97:
15:5c:4e:33:30:2e:08:31:7b:5e:d0:ef:b4:ce:79:
39:30:4d:3c:7f:23:d9:42:e7:6c:e2:c6:dc:16:3f:
ff:5a:a5:ea:db:4d:be:41:67:2c:c2:6e:8d:c0:52:
a3:cc:85:ea:de:b1:19:90:b4:2f:17:bb:d8:7f:11:
25:02:fc:c9:43:22:ab:4d:46:32:5b:d9:77:2a:36:
bd:21:91:69:a5:0e:b2:17:63:32:c9:de:cd:be:98:
1c:aa:8b:2f:7f:ad:ea:73:fe:e2:5b:14:f9:b5:b2:
1d:cc:3a:f6:ba:65:a3:cc:f9:e8:fe:0b:3e:e5:6b:
f3:d7:20:79:40:32:2f:89:cb:67:b6:83:98:76:95:
bf:81:85:0c:24:13:e9:43:7a:57:de:e2:85:1f:2f:
ab:a1:47:36:df:b7:27:75:8e:e6:9a:a1:86:24:50:
76:b4:c1:00:fe:f0:90:31:55:f0:d4:ae:99:19:a9:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:8C:81:B6:AB:A0:2A:A8:55:52:46:6D:89:6B:96:9A:AB:91:4B
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e1:75:c9:04:c2:12:cf:e1:9e:f9:2b:81:cf:35:c8:04:dc:
99:ca:7d:b0:26:55:cd:8e:9f:b7:0b:4e:2f:e5:17:c7:11:90:
59:9e:1e:4e:b1:76:a9:2a:3e:cd:a2:88:91:d1:da:b9:43:aa:
8c:a4:06:bd:94:1f:ff:46:27:18:ad:ea:43:42:9c:55:8a:d4:
c8:2d:5c:ee:aa:59:bf:43:d4:30:d1:4a:f5:5b:3e:d9:51:b8:
5b:24:8c:a3:e5:aa:02:d4:e6:22:c7:c4:d1:ae:b0:80:95:9c:
ec:d5:db:77:f5:b1:e1:52:50:bc:d4:c7:04:fd:6a:c6:8c:e3:
f3:96:b4:d2:e8:6d:d2:c2:1c:c7:77:dc:c5:49:70:50:c5:a7:
76:14:9c:cf:cb:41:34:d1:33:46:09:f3:f9:d1:67:84:2e:c0:
13:70:9b:26:49:96:2c:8d:bf:c6:43:f5:de:26:e4:7a:f7:fd:
80:5d:95:f2:68:c0:4d:16:84:e6:e3:5b:f6:d5:cd:18:5b:36:
c0:b3:a5:05:61:ea:29:2f:cd:d9:fe:c8:08:e4:96:10:00:24:
9d:0a:a2:6f:24:8b:dc:f3:e0:ef:d9:92:2f:68:09:0f:66:e1:
ae:2f:48:ca:e8:f0:9c:c4:65:0a:9c:56:c5:d8:04:62:91:09:
97:91:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:16 2025 by rpki-client