Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: hEQZUAltO9JZJuO/zLMg1vVkwne1BO6MS51/MQWOvAI=
Subject key identifier: F8:B0:47:B4:CD:6D:0D:B8:F4:2F:41:50:C0:B7:5F:A2:01:1C:1D:5F
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019A4E4F468E32251D6CB8950FD8F497711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:09 +0000
Manifest this update: Tue 04 Nov 2025 10:00:09 +0000
Manifest next update: Wed 05 Nov 2025 10:00:09 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: rhVthiTPGImnUeH9ldd/KyyTmgQWQ9Yifdpdh431HYc=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:46:8e:32:25:1d:6c:b8:95:0f:d8:f4:97:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Nov 4 10:00:09 2025 GMT
Not After : Nov 5 10:00:09 2025 GMT
Subject: CN=f8b047b4cd6d0db8f42f4150c0b75fa2011c1d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:39:1d:79:54:3f:c7:7c:1e:51:89:89:d1:
ca:3a:aa:07:87:23:61:97:df:6b:76:d0:76:e9:ea:
3d:b8:0c:5e:21:bd:ec:2b:98:7c:6f:27:d9:58:f0:
b9:ec:e1:cf:b3:18:d9:f9:cb:e5:1f:88:79:44:bb:
20:91:58:72:3e:a5:21:f5:46:bf:dd:6a:34:b4:d0:
67:f7:a3:b1:28:f7:82:ec:cc:6f:c7:8e:a9:01:d8:
2f:c3:1f:11:85:9e:5b:8b:05:6a:50:06:08:03:75:
29:ef:0c:d0:cd:6e:42:40:39:b4:cf:0e:8a:af:73:
fd:8a:b0:fb:a3:21:57:08:44:d8:92:c1:7c:1a:fc:
00:c9:21:da:10:81:99:7d:bf:13:dd:59:70:4e:f7:
0c:76:be:ed:79:9d:5b:3e:65:c3:3d:34:0d:a4:83:
0e:47:bf:d5:e2:1d:ea:9d:f1:7b:db:da:b5:6a:1c:
38:8c:dc:36:b1:e2:e2:f8:22:a6:78:f6:af:39:6b:
48:5d:7a:61:5c:09:0c:03:ae:56:10:c7:91:1f:13:
45:e8:d6:fd:dd:81:4d:54:11:42:62:15:ab:8d:ab:
a6:cf:2e:bf:60:4d:7a:1e:61:a6:9e:42:57:a9:97:
43:45:a7:3f:71:54:8f:c5:db:ba:f0:ca:dd:01:a0:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:47:B4:CD:6D:0D:B8:F4:2F:41:50:C0:B7:5F:A2:01:1C:1D:5F
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:27:59:23:81:bf:ce:50:01:a3:7b:23:a4:4a:ac:d2:ec:54:
88:b2:a7:c1:e7:d9:d8:5b:6d:5c:cc:9f:b1:9b:86:a9:af:76:
7b:19:e7:12:d2:64:ce:06:ed:31:62:85:4b:82:ad:a3:78:c4:
60:4b:a7:f1:40:a9:9b:20:6f:a5:9a:fd:81:75:de:12:1a:b9:
8a:25:1c:ed:50:b6:1f:b0:2d:fe:13:27:4f:ca:80:9c:3f:76:
c9:d4:7c:6c:e1:c9:68:23:23:09:b0:81:54:8d:01:e4:d1:da:
98:0b:e0:82:65:b6:22:d3:ab:92:6f:6c:2a:3e:6a:93:f0:3f:
8f:3f:f7:55:84:9a:2a:a4:f6:bf:73:c1:36:ba:1a:b0:a8:c7:
59:d7:ea:9d:0f:70:a9:66:6f:47:b8:65:24:dc:00:96:58:8f:
90:9b:85:72:e3:25:e9:70:88:c0:27:6b:26:2c:d1:49:3a:79:
ec:89:ad:7e:78:f6:36:18:dc:8f:b1:21:5c:8a:f3:a3:54:9b:
3a:5b:cd:4a:70:e6:8e:7d:95:bf:d4:40:23:ff:a9:2c:4d:52:
09:e6:81:cd:c5:11:d2:df:43:0c:c2:58:86:52:16:ea:5e:6e:
83:3f:6c:9e:05:97:7c:24:6f:83:e8:3a:15:d0:77:33:f1:97:
87:2a:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:53 2025 by rpki-client