Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: Ht+JyUm2Ukej/PisA+Au8d2guMfMizc+TBhlmeflTTA=
Subject key identifier: 37:CF:B8:88:58:DB:9F:EB:9B:5D:C5:4C:28:89:E8:EB:08:8D:30:4E
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019A53ACA982A64FE834AB6CE6F7E585FBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 03ED
Signing time: Wed 05 Nov 2025 11:00:15 +0000
Manifest this update: Wed 05 Nov 2025 11:00:15 +0000
Manifest next update: Thu 06 Nov 2025 11:00:15 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: 3uCAAorJq00CoDltWiDtwsVsRbxMdtgUPRqnkMrrY64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:a9:82:a6:4f:e8:34:ab:6c:e6:f7:e5:85:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Nov 5 11:00:15 2025 GMT
Not After : Nov 6 11:00:15 2025 GMT
Subject: CN=37cfb88858db9feb9b5dc54c2889e8eb088d304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:0a:d9:16:da:ab:91:4f:31:01:45:58:41:
1d:70:ca:67:b2:60:06:f3:e3:40:5b:5a:88:2f:a2:
79:65:ee:ee:cb:72:52:d3:b0:d7:22:2d:17:d2:56:
87:75:c4:ef:ff:b3:e4:56:0f:b7:c3:49:2c:68:53:
5d:2e:f3:81:b4:67:90:83:63:39:06:fe:0c:ec:10:
67:2e:1a:de:cb:fb:2f:e7:c0:65:24:e9:ff:26:a8:
ef:fc:d4:7b:d9:a0:cb:84:72:e4:25:08:27:7d:30:
92:d4:3f:d2:e4:e5:6e:f9:b5:5c:65:b4:c5:e6:6d:
6a:79:ea:9a:1d:3b:5d:2f:22:77:33:55:6f:a3:cc:
1a:8d:a0:5c:61:cf:84:be:8a:6f:5f:f3:39:f3:e9:
fe:91:8f:72:9d:ea:eb:fe:f6:1a:87:06:6b:65:58:
29:c4:61:4f:01:82:5a:3d:b8:23:bc:e0:96:7a:38:
46:2e:35:bc:d1:f5:f3:c5:38:aa:b5:d5:10:62:58:
2d:9c:5d:d5:86:06:f1:ea:3a:1b:a6:3c:0f:68:4d:
e8:51:3f:ed:15:94:e1:53:ec:08:ba:9f:8e:f0:15:
5b:88:8f:ef:dc:ed:50:9a:fd:ed:db:85:a2:18:be:
fb:01:eb:65:ad:32:87:b1:40:99:25:fd:02:99:b0:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:B8:88:58:DB:9F:EB:9B:5D:C5:4C:28:89:E8:EB:08:8D:30:4E
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:84:e9:d8:54:9d:6d:e2:b3:5b:82:e7:69:c0:19:af:6f:7a:
8c:de:3e:03:e5:05:9d:10:14:72:5e:54:8d:94:9c:f4:45:90:
79:17:d0:f5:36:64:db:8a:65:54:de:24:f0:e5:27:56:72:50:
34:c3:39:d9:17:32:cb:96:ba:d7:46:9b:ea:ea:a5:cf:6b:89:
e5:9c:e1:1e:89:5c:4b:2a:dd:29:51:c4:91:0f:3f:8c:48:e7:
e7:24:0f:ae:b1:2a:ff:b2:d8:ad:3d:9b:23:64:1b:63:cc:1e:
85:75:c2:6a:ae:e0:45:1d:ac:1c:21:42:9b:ff:be:45:08:f6:
74:8e:79:9b:35:9c:a9:3d:a6:4a:2e:f3:80:36:cf:74:d8:59:
39:27:de:b1:cb:ce:41:7b:a2:57:88:57:8c:da:92:16:73:c0:
72:ab:52:35:27:43:62:31:96:d9:d7:79:65:5f:ab:5b:76:8f:
51:bb:81:38:a0:99:b8:39:4d:d0:f7:0b:db:51:ea:11:5d:17:
7d:f1:59:06:22:58:b8:19:b7:86:f4:c0:24:32:a5:b5:de:89:
46:47:7b:92:f5:a3:06:2c:db:70:2b:23:8a:ff:78:15:be:3c:
7e:25:11:09:51:55:4e:2c:a6:24:8c:10:93:ef:1b:7b:e0:05:
95:1a:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:52 2025 by rpki-client