Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File: fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier: D+j8lXDgD4YTKsYXgbtLtf0mnCImD2ZkC3TlbisDb2k=
Subject key identifier: 97:D1:C4:73:E8:5F:4A:B7:2B:C3:0E:6C:AD:EF:E5:FB:95:6A:45:5D
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019A4E18788ECFFD90C056C19D7CA717D7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number: 0D03
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: 3SaM5UMI9nlNHbsm1ziUJ5+Thy7bnspVgUU0u+nw8FQ=)
6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:78:8e:cf:fd:90:c0:56:c1:9d:7c:a7:17:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=97d1c473e85f4ab72bc30e6cadefe5fb956a455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:88:44:34:c0:2b:3e:5d:d5:2a:ab:62:40:
0c:d6:9a:07:d8:11:90:f3:21:fc:5e:6d:c6:3a:87:
ca:ec:a5:92:54:65:86:7e:d9:a9:49:22:5e:a4:56:
d2:fd:e3:d6:a7:98:71:cd:e1:a9:bc:69:6d:11:b8:
cd:c0:7d:77:1f:b6:6e:f9:ec:6a:62:a2:da:9f:0c:
a8:dd:f8:cc:ca:38:42:72:fc:68:df:2d:d8:15:2d:
e9:df:2e:fe:80:a5:92:c5:7b:d7:00:43:84:b5:0a:
1a:0b:de:7c:9a:e3:f2:58:e0:84:55:c3:27:20:eb:
2e:23:1d:68:7e:06:35:09:aa:20:a4:90:2e:9c:fc:
b9:e1:4f:93:0f:b2:77:78:4e:d0:68:d7:26:c1:1f:
07:25:1e:0e:c1:74:89:c0:7e:aa:95:34:98:0f:c2:
cf:09:bb:f1:8c:6c:b3:1d:71:d2:33:d6:77:84:63:
ed:0f:d3:ef:5e:dd:b4:2f:f9:f3:eb:ed:08:4c:2a:
e0:da:05:e8:c4:57:fd:93:c9:6e:6a:46:e0:fe:d8:
f0:c0:65:ff:7e:40:4e:44:ba:c0:ee:2b:42:8c:b3:
2c:fc:33:43:64:7c:a8:8b:bb:e0:ac:f8:53:30:f6:
1d:95:64:b7:2e:7c:82:cc:34:73:f9:fa:66:c8:d0:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:C4:73:E8:5F:4A:B7:2B:C3:0E:6C:AD:EF:E5:FB:95:6A:45:5D
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c7:ed:40:2b:94:fd:e4:98:b0:51:df:96:bb:37:b9:9f:41:
49:c0:13:35:ee:62:01:d6:d6:e9:15:28:79:b6:f9:5f:b2:2e:
36:42:96:1b:0f:58:98:8e:66:ff:e7:c4:a1:f0:78:99:a1:9d:
94:cf:d8:5d:ab:2f:fb:e7:aa:fd:a9:8c:c6:4a:a3:0f:01:85:
b8:58:0e:85:e2:fe:9a:78:79:31:52:8f:fe:98:e1:6b:94:51:
be:00:bf:37:1c:d6:3c:9d:16:ad:46:b1:2c:17:9e:34:c5:fa:
1d:76:16:b2:be:b5:66:c8:19:99:d8:7b:3b:cb:1b:1c:5f:bb:
73:7b:33:ea:ff:85:b6:66:f5:be:d3:4e:45:6b:91:ca:a5:bc:
68:ab:05:0d:36:e0:ba:7f:b0:c6:d0:68:03:8e:83:d5:ca:64:
f8:29:c0:3c:80:95:e8:ac:7d:2e:7a:6f:ce:9e:f8:ba:9c:7d:
e6:ea:27:d7:f3:0c:4b:7a:5c:ca:8b:d2:0d:93:1a:d6:ce:78:
ec:e8:e2:b5:ca:91:f8:c9:39:d2:a3:16:19:78:3d:5d:b0:d8:
aa:a3:ad:66:22:4c:ed:27:2c:68:3f:f1:1e:83:bc:3a:19:76:
37:02:db:d9:76:a7:f9:85:23:83:a9:e4:24:da:9b:2a:d0:69:
b0:6d:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:47 2025 by rpki-client