Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier: GSoyzI1y6QJsx2BYe7QFX1jTIA9vXgsVUtQaI3rSYaI=
Subject key identifier: 46:34:3C:52:F3:C0:0D:D7:7D:C4:38:3A:FC:CB:1C:37:62:58:DF:23
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial: 019A4EF567E5FA6535EB4E9AC0210DF57554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: CPVXD95scUbDSbXQz6ikgbJ8bEw8k+qfMk4a2Go46pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:67:e5:fa:65:35:eb:4e:9a:c0:21:0d:f5:75:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=46343c52f3c00dd77dc4383afccb1c376258df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:da:b9:fe:b4:70:4d:db:1d:0b:b1:88:b8:
7e:89:45:85:3d:06:14:f1:ba:21:50:df:a8:59:44:
51:38:8f:5f:b9:14:ad:b9:68:1f:d8:1b:49:a4:c7:
41:12:b1:2f:f6:89:87:70:9b:3a:35:ed:18:75:3c:
b2:ff:db:6b:28:b4:1c:95:21:19:b1:29:97:97:d7:
51:f9:12:f8:fd:38:2b:b7:91:85:88:14:f7:38:4a:
19:e8:0d:11:0b:61:17:4d:2a:6f:c4:f1:0e:7a:1f:
c5:f2:fe:6a:82:a8:c4:d1:a1:4e:ca:6b:46:62:4c:
88:6d:75:4d:6e:b8:ff:d7:5c:ca:ac:f3:12:1b:e6:
29:30:57:12:cd:70:0c:7a:7a:86:2a:fa:42:59:bb:
fb:4b:7c:9f:c3:5b:bf:13:1a:bd:46:4c:b5:da:6a:
24:0b:9c:ab:68:12:c1:35:69:a6:0f:73:84:c9:38:
a1:7c:e6:5c:91:47:e8:a9:99:a7:72:08:3f:58:fa:
63:f9:df:38:c2:ea:a0:cf:18:68:61:de:36:7c:a3:
c3:e3:43:a6:26:74:fb:c5:43:bd:b0:62:8c:f7:f0:
92:eb:06:83:f8:78:e7:c9:bf:c3:5e:09:39:d8:8f:
ff:9f:89:a7:ac:07:60:04:26:1d:e8:9c:d0:6b:26:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:3C:52:F3:C0:0D:D7:7D:C4:38:3A:FC:CB:1C:37:62:58:DF:23
X509v3 Authority Key Identifier:
keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:b0:40:b2:0e:3d:a2:86:c7:8f:b1:99:95:94:f5:c1:37:
1a:b0:cf:c8:d7:9a:f5:65:34:46:90:fa:ea:3e:64:23:80:9a:
9b:7a:c1:9c:ca:1a:0d:01:24:2f:c4:e9:ae:36:f1:62:59:68:
9a:d7:0a:02:01:4c:d6:c6:5c:8d:32:7f:aa:c5:36:2a:3e:a8:
5d:42:75:fe:d5:d4:07:34:93:6e:64:93:2e:52:5d:1d:21:cc:
fa:28:e8:17:4a:bc:b1:29:bc:22:0c:16:41:12:db:23:46:f2:
43:2f:00:89:a6:a5:65:6e:c9:65:60:e5:55:28:7d:bc:d8:0e:
5f:b4:cb:1a:51:6d:b1:48:28:f7:d4:a5:0c:91:04:ea:ea:26:
24:e5:1f:e2:71:6c:31:4e:3a:f3:18:d7:7c:4b:71:ff:8e:bf:
d9:a5:67:ee:98:1e:8a:33:d1:a4:d8:51:51:67:ce:dd:a8:ec:
b1:ef:f8:16:61:19:ea:c2:5a:d7:70:5b:f7:53:05:64:81:8d:
64:9e:68:a9:f5:f6:2e:de:6b:98:f0:a9:4a:46:0b:20:4d:29:
29:e0:ac:58:69:e8:da:ac:85:95:49:87:15:99:46:e4:32:8d:
8f:fb:31:a4:bf:d4:f3:e0:35:c7:6d:f9:bf:97:8f:6d:b7:be:
47:30:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:31 2025 by rpki-client