Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: qbikWIsssdV5owyRnZKH26TW/sshIubDt+9SQU9b25c=
Subject key identifier: 7D:C4:1D:C9:BE:F6:8D:1F:4A:15:BB:7C:03:F9:1A:23:6E:C3:DD:2B
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019A4E868BBE31BDC44E303F56184789E688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 06C2
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: V6SPF82M7vhJNgjwk8fiG3sDOilNV8ZB8zvLFh3o2kE=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8b:be:31:bd:c4:4e:30:3f:56:18:47:89:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=7dc41dc9bef68d1f4a15bb7c03f91a236ec3dd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:5d:b7:11:50:fc:48:ee:2e:9d:1b:3d:1f:
d4:e8:e4:bf:a1:2b:f1:b4:da:e2:b1:a8:43:37:3f:
f0:16:f9:a9:c3:5e:e5:fa:4c:43:ca:6d:58:c1:d7:
aa:45:12:dc:6d:db:67:3d:3d:7e:62:f8:c7:40:30:
f0:e3:57:41:69:06:d1:b9:7c:c0:38:cb:01:08:c6:
c1:9a:10:fb:35:8d:63:3f:64:08:ef:be:c1:4e:ee:
f6:c6:0a:4f:ac:d3:60:3c:8e:64:81:81:a9:f6:b0:
32:bb:42:4e:58:da:3c:4d:48:ae:f8:10:e8:47:33:
1a:1f:34:eb:57:e2:1c:4e:7f:7c:8d:46:ad:a9:d3:
b2:91:ec:71:d7:7a:e9:40:aa:d5:35:38:f2:16:df:
f2:0d:98:f5:e9:14:98:dd:4d:a7:75:65:94:b5:36:
0a:c1:b1:5b:52:e7:f4:ba:f4:61:1a:54:22:df:d1:
05:33:43:63:63:db:eb:69:b3:5a:f6:2a:a0:a0:8e:
de:3c:bb:fd:37:ab:b9:68:c5:5d:a5:b4:cd:b9:0d:
b2:05:bf:13:b5:a7:b3:f9:d5:1b:c5:2b:86:ca:61:
3b:72:3c:47:69:0f:85:ad:cc:4a:ce:83:17:cc:52:
17:56:23:23:9a:37:d9:b2:46:11:99:d8:ff:33:23:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:1D:C9:BE:F6:8D:1F:4A:15:BB:7C:03:F9:1A:23:6E:C3:DD:2B
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8a:6b:01:96:bb:9c:f8:10:e2:49:8c:68:c8:f1:b2:f6:36:
c8:d2:74:b6:c5:e1:69:0b:97:0f:a9:04:0a:b0:1a:e9:1b:2a:
f3:6a:42:cd:4e:77:a3:d8:c2:0b:8b:11:28:ca:e8:e6:16:b7:
45:92:c8:a4:02:14:26:e5:46:e7:58:00:c6:3c:01:cf:ce:3c:
44:0d:8c:30:9e:40:ee:e3:75:01:ec:0a:46:bb:ae:38:86:bb:
27:37:ff:08:74:ce:ff:03:40:be:76:17:3e:71:f0:4f:93:7f:
c0:bd:92:6d:27:d4:25:e4:bd:b4:57:ba:0d:d2:1f:9d:de:25:
66:3d:78:3f:4d:ff:e9:4a:90:22:60:38:d3:4a:c7:27:13:e5:
f5:17:da:d9:bd:1c:cc:d9:0b:8c:6a:74:30:59:d1:01:37:47:
1d:8f:64:75:16:5e:7f:44:5e:2d:24:37:c3:7e:4b:78:59:43:
f7:3a:65:73:14:c5:23:b8:92:2f:19:a0:93:74:60:85:fe:03:
90:43:a9:6a:28:8a:f3:56:dd:8d:17:85:f8:19:03:d4:4c:13:
2b:92:e9:06:97:96:f2:60:77:23:f4:82:40:2a:a4:87:bc:e7:
66:63:ba:42:d1:f5:67:12:45:86:41:37:1f:87:8a:75:54:57:
22:b1:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:17 2025 by rpki-client