Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: +lxkiRZHtHMYA2K1KxZjoscvk3b0MVhUJyWy3cZIoy8=
Subject key identifier: 58:6B:6C:03:62:31:F3:CC:C1:8E:36:D4:D6:1B:C1:1C:C6:28:D7:E2
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019A4E191E028D8F2B7A68AC060D7B60BBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0B7B
Signing time: Tue 04 Nov 2025 09:01:00 +0000
Manifest this update: Tue 04 Nov 2025 09:01:00 +0000
Manifest next update: Wed 05 Nov 2025 09:01:00 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: JbeThqO3WWts4Mtt36G6eb0q1dLhWwrHZSnu51nQndc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1e:02:8d:8f:2b:7a:68:ac:06:0d:7b:60:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Nov 4 09:01:00 2025 GMT
Not After : Nov 5 09:01:00 2025 GMT
Subject: CN=586b6c036231f3ccc18e36d4d61bc11cc628d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:1d:e8:de:af:c8:7b:44:da:fb:78:01:b1:
72:a8:6f:ea:11:63:7f:52:30:00:3e:f6:25:4d:68:
c3:47:93:0e:8c:2b:6e:f2:6c:aa:c3:e2:62:59:62:
62:80:49:14:63:b0:3d:e0:a5:f5:b0:2e:83:6f:a7:
c5:d9:66:b4:b2:c2:18:4c:4b:0e:c1:7d:51:55:38:
f7:80:65:a5:16:ff:b9:87:4f:28:50:61:00:bb:ae:
fd:81:83:5f:af:47:dd:78:db:1c:a4:76:0c:39:16:
5d:66:1f:7b:bd:27:82:fa:14:4e:79:72:28:8c:88:
cc:61:49:f6:a7:fe:c9:8b:71:9c:12:75:34:f5:5d:
5b:1f:81:ae:af:3d:34:d7:01:ce:08:8e:cc:a2:b6:
79:ab:24:e4:6d:e9:c3:4a:e8:06:93:41:9f:6e:6b:
58:ab:6c:1e:e1:c6:fe:16:e4:42:df:eb:61:bd:c3:
9b:48:17:5d:78:19:10:dd:b5:1f:a1:d0:a2:91:ab:
bd:98:c0:27:dc:5c:50:05:8f:38:f5:ab:e5:6c:4d:
29:46:ca:75:ab:87:6a:95:7b:fb:f9:a8:5d:f1:3e:
b6:26:41:c9:83:14:48:7a:61:ba:c0:57:02:13:fb:
c7:fd:2a:eb:15:65:6d:aa:81:fd:a7:a2:33:8b:a6:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:6C:03:62:31:F3:CC:C1:8E:36:D4:D6:1B:C1:1C:C6:28:D7:E2
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:ee:35:4a:50:cc:65:b9:0d:d1:57:76:2f:46:cb:c1:cc:
e5:09:22:a2:8f:59:74:30:78:2a:ab:9d:06:59:85:8f:b5:99:
c6:e6:b1:69:2f:c1:ff:82:52:2a:23:6f:5d:55:71:20:22:57:
11:81:b4:6b:26:90:9d:90:d8:e6:52:36:39:97:bc:4c:fb:ac:
fb:94:a3:8b:c4:90:b6:e5:44:80:0c:48:ca:aa:27:70:7b:47:
b4:da:15:8a:df:22:32:2b:59:bb:85:4a:3c:76:43:92:b6:8d:
78:be:b4:5a:1f:db:4b:04:67:10:60:a5:87:87:c7:f8:d8:bd:
6d:29:63:0f:d2:bc:9f:15:c3:5d:e6:f3:b5:ff:90:ed:53:76:
48:50:ba:fa:1f:eb:19:bd:da:92:2f:74:c5:c8:9b:5e:3d:3a:
82:8e:27:c7:f7:af:1c:27:cc:83:ed:35:ae:4d:d9:b1:e3:f0:
6a:aa:15:24:ec:39:4b:b5:c9:e4:3e:08:c0:39:73:b7:3f:99:
98:2e:ba:55:86:6d:f9:1f:2e:66:2e:98:4c:d9:a0:32:2c:a9:
35:5c:ad:7f:67:ec:ef:bb:13:af:9c:cc:73:90:44:84:61:9d:
08:98:6e:2f:7a:69:ac:2b:b9:e7:4d:06:ba:c2:6d:e5:76:31:
df:da:cd:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGR4CjY8remisBg17YLu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjUxMTA0MDkwMTAwWhcNMjUxMTA1MDkwMTAwWjAzMTEwLwYDVQQD
Eyg1ODZiNmMwMzYyMzFmM2NjYzE4ZTM2ZDRkNjFiYzExY2M2MjhkN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzsd6N6vyHtE2vt4AbFyqG/qEWN/
UjAAPvYlTWjDR5MOjCtu8myqw+JiWWJigEkUY7A94KX1sC6Db6fF2Wa0ssIYTEsO
wX1RVTj3gGWlFv+5h08oUGEAu679gYNfr0fdeNscpHYMORZdZh97vSeC+hROeXIo
jIjMYUn2p/7Ji3GcEnU09V1bH4Gurz001wHOCI7MorZ5qyTkbenDSugGk0GfbmtY
q2we4cb+FuRC3+thvcObSBddeBkQ3bUfodCikau9mMAn3FxQBY849avlbE0pRsp1
q4dqlXv7+ahd8T62JkHJgxRIemG6wFcCE/vH/SrrFWVtqoH9p6Izi6bZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhrbANiMfPMwY421NYbwRzGKNfiMB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6ruNUpQ
zGW5DdFXdi9Gy8HM5Qkioo9ZdDB4KqudBlmFj7WZxuaxaS/B/4JSKiNvXVVxICJX
EYG0ayaQnZDY5lI2OZe8TPus+5Sji8SQtuVEgAxIyqoncHtHtNoVit8iMitZu4VK
PHZDkraNeL60Wh/bSwRnEGClh4fH+Ni9bSljD9K8nxXDXebztf+Q7VN2SFC6+h/r
Gb3aki90xcibXj06go4nx/evHCfMg+01rk3ZsePwaqoVJOw5S7XJ5D4IwDlztz+Z
mC66VYZt+R8uZi6YTNmgMiypNVytf2fs77sTr5zMc5BEhGGdCJhuL3pprCu5500G
usJt5XYx39rNEg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:48 2025 by rpki-client