Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: Bgl8wy6aZEiy1XP0A5yxmig9Q44XRnapZz//rrmB+gE=
Subject key identifier: C2:2A:32:55:9C:46:55:89:61:3D:77:3E:B0:FB:DC:6F:E9:CB:75:8E
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 019A50E42649F2D6E94FCA9AED4C11037B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: FuFlGlulF3qcLuoP4BrPdKyMineiT2XNHVWdRZndt20=)
3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:26:49:f2:d6:e9:4f:ca:9a:ed:4c:11:03:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=c22a32559c465589613d773eb0fbdc6fe9cb758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:4c:09:08:ad:25:4a:b3:fa:b9:80:c6:2f:
01:4b:7e:cd:57:db:9b:e9:7b:c6:c2:12:1a:db:3d:
bb:c7:85:06:4b:d2:55:64:a3:35:67:4f:05:b8:6c:
44:fe:fb:f7:ab:2a:3a:6d:98:ad:17:67:3f:f5:d9:
b4:4d:12:30:8b:c5:ad:b1:e7:ad:df:2f:be:47:d1:
03:8e:d8:82:ac:3f:50:47:db:aa:d5:87:cd:0a:fb:
9a:3b:60:a6:44:0d:75:f3:55:67:8c:3c:0f:9c:42:
1e:71:5a:a5:8a:4d:ac:ec:6a:3d:40:a0:d7:20:b0:
91:9c:0a:06:68:28:fa:41:76:b1:2b:17:a4:73:7e:
73:77:15:f3:1f:1b:dd:7e:d0:11:13:c2:26:f4:00:
66:2f:a6:20:73:72:9c:20:56:38:16:83:12:c6:95:
ea:e6:cb:20:dd:2b:06:93:6c:a1:a1:d0:02:e6:41:
38:b5:18:ae:e2:f8:6f:08:e3:49:2f:35:3b:cc:d0:
8c:6e:45:0e:c0:3d:c1:04:ef:a7:cf:15:df:1d:fa:
84:29:96:f7:6d:1d:02:33:8d:56:68:c3:3f:ac:3a:
7e:ee:e2:a8:d8:88:d9:00:e2:81:ee:ae:0b:9a:d2:
02:79:86:fc:7c:31:08:23:22:55:55:57:2f:80:0c:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:32:55:9C:46:55:89:61:3D:77:3E:B0:FB:DC:6F:E9:CB:75:8E
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1b:0c:e1:f6:d9:3d:f1:cc:a0:a2:99:a4:53:d8:8e:6c:ec:
8e:51:2d:af:e7:7d:76:5c:1f:e4:ba:ce:2f:19:a1:f1:a4:a4:
44:d9:07:e2:b2:84:78:41:31:57:6c:46:6c:f9:80:b3:25:e0:
52:28:b6:29:bc:04:83:1b:34:9c:67:26:1f:0e:9d:d0:39:5a:
45:42:e0:b9:56:e1:b4:fd:da:38:0a:ea:97:fe:ee:44:0b:d1:
a9:4b:79:6c:f0:be:34:e1:b2:c7:58:6e:5d:80:86:99:bd:70:
d6:a8:29:e1:e8:36:fa:65:5d:4f:e2:1d:9e:bf:0c:fa:07:f9:
bf:e8:dc:08:2e:9b:d5:5d:03:8c:41:5f:16:fd:b5:21:0f:6a:
4c:65:29:ed:94:96:fc:1a:14:f6:15:4a:b4:f5:8a:39:c9:25:
57:fd:f4:b0:5e:74:93:02:80:86:36:59:a2:2c:ae:36:e2:6c:
c9:d3:2a:88:a6:49:8d:a6:91:7e:78:c9:f3:3a:32:ca:e1:44:
e5:7a:2a:69:de:e1:25:f1:45:7a:07:b9:8b:6e:87:7a:d2:6b:
39:d4:b2:55:28:83:cd:d4:2c:64:08:50:96:35:d4:22:34:30:
a0:a5:74:08:09:7b:4d:11:0b:e8:90:e8:b2:9c:55:05:fc:f5:
72:85:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:31 2025 by rpki-client