Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: lMnAQ0eHQHWiD/JWEj/W8mjLlC5OheijRDkNUPiXIXQ=
Subject key identifier: 0D:D0:B1:53:80:55:4A:56:03:CE:6E:E7:DE:F1:85:CC:1C:B1:13:4A
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019A4D742553365CCE9A00C1FBF19656F83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: B8K1CHnvNPOvUxz0aViJNeC51JdSlP46rxk60gR0B8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:25:53:36:5c:ce:9a:00:c1:fb:f1:96:56:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=0dd0b15380554a5603ce6ee7def185cc1cb1134a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:96:86:6f:e8:5a:95:b4:5f:27:b1:d1:8a:
6d:e1:af:f7:1f:54:88:12:b9:2e:50:73:23:33:a8:
e2:be:d3:12:0b:74:9c:60:4d:db:c1:ad:08:7e:d6:
dc:94:41:a5:2e:6b:da:c0:94:d1:e5:35:3f:4b:f9:
34:5f:e8:b7:18:dc:9f:be:1d:f0:95:47:87:0b:4c:
46:2d:1f:a1:8f:f0:18:b8:95:a8:98:b8:64:60:79:
ae:d6:cf:6f:95:84:ec:50:2e:b0:7a:de:00:6f:8f:
b9:2b:f0:9c:2a:19:58:f4:6c:d5:c0:d7:78:72:6f:
89:2d:eb:07:d2:6f:87:3a:c7:8c:f0:22:e1:66:80:
e1:21:d4:90:07:62:9d:ad:83:8f:b4:d1:d9:ae:c2:
a8:ea:66:a5:90:be:1c:e9:77:ef:52:7e:1d:60:5e:
39:2e:a6:27:13:d8:6d:d9:ec:f2:5b:43:12:39:47:
5d:6f:9f:23:79:cf:db:0b:c9:f6:73:46:17:ec:eb:
96:6a:0a:ec:74:16:6e:39:76:09:69:84:7e:4b:aa:
a3:54:8c:1c:90:4f:86:cc:c5:9f:21:17:b1:f4:8d:
f5:41:f7:52:56:0d:94:37:5a:7a:43:49:32:e8:07:
6d:91:d7:0b:25:a1:48:2e:57:d8:b8:42:e5:46:43:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D0:B1:53:80:55:4A:56:03:CE:6E:E7:DE:F1:85:CC:1C:B1:13:4A
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d1:d6:f9:1f:04:9c:28:17:94:2d:a4:84:61:d7:71:d9:83:
b5:87:9f:1d:6b:bc:92:0d:a1:73:13:7d:ec:3b:0e:89:02:18:
74:64:c2:3b:6f:d5:d3:d0:91:b0:bd:da:f3:ef:d5:94:85:cc:
9a:6e:de:62:0d:d4:17:44:e8:ce:52:a1:00:04:c1:d8:53:85:
9f:1b:0b:0b:62:ac:24:76:49:07:e6:66:18:03:b7:63:56:5e:
9a:46:62:b0:b1:f1:1d:57:e6:8e:aa:6e:83:71:dc:f4:ba:2c:
47:1b:3e:fe:d8:af:4a:a8:19:70:2e:80:92:29:64:12:95:c5:
dc:9b:ec:43:fd:dc:20:ee:40:7f:9f:f7:48:5d:45:74:d2:b0:
5f:e5:95:69:6f:17:6b:d4:fa:54:c8:2d:c5:45:b2:fd:22:5e:
e7:a0:58:07:c3:66:31:bd:4c:b4:a9:d8:fd:9f:72:17:ca:d8:
b1:ef:2c:cd:fa:2e:27:34:9f:84:75:14:09:09:8e:40:f7:10:
54:14:af:fb:0b:6c:6c:1b:28:7c:1b:2a:e3:f3:ab:99:a3:12:
ba:fe:15:b3:87:f9:6e:3e:84:4f:d7:0c:fe:1c:78:b7:b5:11:
8f:64:7a:ea:bb:3e:70:fa:88:4c:54:a9:04:6c:70:81:3b:99:
3e:a5:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:07 2025 by rpki-client