Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: EUNYxVExWerKhkqIP+OokTNZ9S23zremnEKUHKdxIAU=
Subject key identifier: E5:5D:F8:24:10:05:E5:16:27:2F:36:A0:5B:FD:28:B5:1A:2D:B6:12
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019A5007665C04992A78CE780011D08F7703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0D32
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: fMRA8S9/cbPEXO0kVJKpJmVrk/AGyFc5dIdqXtHmICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:66:5c:04:99:2a:78:ce:78:00:11:d0:8f:77:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=e55df8241005e516272f36a05bfd28b51a2db612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:88:d7:4d:aa:47:ce:5a:65:bc:59:39:02:
9d:6c:3a:60:4d:69:82:2b:d7:0d:da:2e:d3:26:a0:
53:b6:a5:01:d6:33:4a:25:9c:20:e7:19:9f:94:57:
f3:a2:f5:fa:bc:0b:49:14:09:c6:1e:db:74:71:eb:
53:63:e7:9e:4a:76:7a:db:ff:0e:72:0b:84:e4:c0:
af:8f:7c:d1:ba:3b:7c:76:c3:71:85:ef:70:67:0c:
07:f5:81:80:16:69:d2:78:d8:95:99:8b:19:e4:51:
d8:85:cc:23:2f:19:0e:7e:62:d3:ff:9e:9d:b5:7e:
9e:e6:19:f1:69:49:63:2b:8d:74:2c:d7:ed:1a:7d:
24:6c:3b:02:c0:2b:87:a3:5b:bb:20:19:70:38:f0:
99:54:31:f4:c6:61:37:7c:c9:8b:8a:85:50:9b:2e:
c7:7f:5e:fc:b3:48:94:ac:4a:66:25:cc:39:6b:2b:
91:08:66:87:f0:8e:65:bc:fb:cb:ed:fa:bb:0a:79:
64:8c:d1:94:14:d5:22:a7:f5:f9:8a:eb:ab:6f:6a:
57:9e:81:97:cd:a7:8f:3a:b1:09:53:26:d4:81:39:
23:1c:cb:92:83:c5:d4:52:08:57:26:1c:57:57:de:
1f:8c:bb:60:72:c6:7b:0e:1f:13:bf:eb:78:64:bb:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:F8:24:10:05:E5:16:27:2F:36:A0:5B:FD:28:B5:1A:2D:B6:12
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:ba:42:61:13:7f:52:90:3d:b4:af:5e:a6:33:5c:eb:b2:
82:f5:a9:ac:4a:20:2e:9d:e9:2c:01:85:7f:a2:33:6a:b7:fb:
2c:f3:aa:0f:55:af:e7:ce:21:8e:4b:40:3e:bd:ee:ac:02:21:
65:ef:c8:8c:75:13:96:91:01:e8:52:63:ca:e4:01:ed:9d:1b:
de:29:a8:9f:2e:61:75:eb:79:6c:08:d9:51:d3:05:b0:21:12:
fa:70:50:15:47:1b:f3:e9:2e:cb:b1:4a:a3:12:ea:92:da:19:
53:c8:e9:2f:7d:ea:02:d2:66:11:f6:9b:ba:90:bf:e8:a1:68:
be:5c:51:2c:ba:69:d8:ae:e0:de:5a:b3:40:e4:37:c2:f9:e7:
25:81:92:c4:2b:8d:d2:eb:3a:a4:3c:d0:48:9a:1c:a8:8a:e6:
ac:21:6c:08:56:a2:90:af:29:99:0d:bf:2f:fc:eb:eb:d5:01:
dd:3c:7a:31:fc:a0:c7:55:fa:b1:58:21:5c:99:7d:7f:9e:c5:
95:9a:40:2b:8b:1e:82:50:e0:0f:6f:ee:b7:35:58:65:af:94:
b8:71:81:32:88:2c:51:99:a0:41:b7:83:15:b2:d7:d3:51:a2:
72:69:02:9b:e5:c5:94:f9:d1:c0:b7:f2:3b:63:2b:58:bb:a3:
10:59:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:02 2025 by rpki-client