Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: u0hob5ROLOOosojNk1strWGnqBdwUhhrRs6FLovywfQ=
Subject key identifier: F7:12:47:30:B7:0B:61:33:3E:12:E7:10:8C:E7:01:35:8D:F1:73:ED
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 019A4D3D29DC3E3D1F75A8F660187AB19335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 144B
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: sthwlRumdKd+eTKlLiNPfGO7IgGXyDnxihMAzpaeES4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:29:dc:3e:3d:1f:75:a8:f6:60:18:7a:b1:93:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=f7124730b70b61333e12e7108ce701358df173ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:5f:8f:ba:ac:a3:6f:55:56:94:17:59:19:
b0:39:56:14:2f:79:43:20:88:b0:71:7e:51:6a:6e:
67:ba:22:67:38:03:85:2d:3a:26:88:9d:9c:5f:de:
4c:62:64:1a:5d:10:ff:07:61:f5:68:cd:b8:ab:27:
84:31:b2:28:38:12:62:1a:1e:e3:94:2b:d0:7e:90:
09:2a:ee:65:de:1f:5b:e0:68:49:79:2c:98:be:d3:
80:37:5e:7d:4a:6d:17:08:ec:b0:39:ba:1a:3d:4c:
23:92:93:71:f9:e0:66:5d:fb:c2:b0:04:53:cc:c7:
15:b9:c9:4a:0d:b0:f9:40:26:ca:a1:8d:c6:d9:47:
1a:43:99:cf:06:85:49:2a:86:3b:cf:af:69:ac:9c:
07:3b:5f:27:d3:a1:9d:43:b6:e6:02:8d:aa:76:0c:
db:73:4d:f2:6d:13:fd:8c:e9:36:26:ee:05:ab:e6:
9d:79:5a:97:bd:3c:e4:00:5f:03:9c:b8:c8:e5:fc:
6b:8b:3e:42:fb:58:ba:23:a0:a9:80:6b:a2:4f:4f:
08:3f:c2:6b:6b:d3:46:56:10:a0:42:7a:0d:03:86:
c7:a7:23:8a:16:e0:fb:fe:8d:87:ca:88:49:ab:c1:
6a:c6:e7:c4:97:1b:14:cc:6a:8c:35:92:77:6a:c2:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:47:30:B7:0B:61:33:3E:12:E7:10:8C:E7:01:35:8D:F1:73:ED
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:54:02:42:76:5d:e0:cb:5d:63:27:33:15:7d:07:8c:ad:ef:
97:5f:2d:92:3a:74:5d:91:f2:60:27:ce:11:9e:e6:5e:8c:fb:
78:24:b8:4e:ed:4c:26:52:3b:3e:71:03:27:1c:91:64:f4:af:
58:55:a8:b5:86:69:67:41:8f:17:24:53:7a:b9:51:68:0d:1a:
2b:b0:5b:18:c4:76:db:a0:55:60:f6:2c:48:39:f8:81:78:58:
29:78:2b:13:82:e4:bb:f7:07:15:8a:5c:a7:b8:0f:a7:f7:5d:
5a:c6:29:59:ff:fc:15:0d:8e:e1:b1:a2:76:26:5e:33:fb:b3:
b2:2f:5f:ce:8a:c3:d3:7a:69:73:c0:71:3f:f0:96:0c:48:64:
55:d7:c0:af:f4:45:b3:36:47:35:15:9f:ff:23:01:68:fb:e1:
c2:e6:23:78:83:a2:1d:c8:7f:f7:21:e5:3b:c0:9b:cf:20:97:
ed:87:22:03:0d:88:34:e8:de:88:82:20:a8:66:bf:fd:1d:93:
7f:92:d3:d8:cf:f7:fb:62:0c:ba:88:5b:9d:f0:fe:3f:fa:7d:
d1:1d:0a:3a:83:4b:07:31:c9:b3:cf:9a:c4:ac:e1:eb:e6:33:
f8:39:ef:e3:e6:28:d6:48:1b:8a:53:f1:08:d6:37:1a:2b:86:
50:c9:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:20 2025 by rpki-client