Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: bJLBAR3RcQBKjRi8ULfcQ+gTaELbGPpwuCWk8DhNP5I=
Subject key identifier: C0:9F:63:30:24:54:89:BA:53:EF:61:AA:1A:C6:72:E2:CE:34:EA:42
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019A533F6587A509A4C1F647D37A3862BF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 08E8
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: Uzd0j63HqMA6mja7vA3saA0Sg8yzUP8vNLp7RwzJJ+4=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:65:87:a5:09:a4:c1:f6:47:d3:7a:38:62:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=c09f6330245489ba53ef61aa1ac672e2ce34ea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:b5:b9:9e:5c:36:92:e0:a0:27:f3:78:e8:
af:2f:d3:44:2a:95:0e:fe:40:d9:d4:11:8d:36:d5:
0b:03:e7:e8:8c:16:f7:f5:f5:88:47:ae:ff:5d:30:
62:bc:f0:91:ad:69:e8:f6:37:76:3c:98:02:39:c5:
8c:2e:d6:c5:cb:f0:3c:d0:ac:3a:94:b3:82:35:c4:
dd:81:db:bf:8f:cf:7c:ef:10:79:33:85:51:d4:97:
4f:31:5c:89:23:f4:f4:c8:8f:9b:5a:08:c8:3d:b5:
d2:e3:90:52:42:b0:06:64:3f:65:50:88:e8:c9:7e:
2d:5d:58:ac:13:2c:38:2a:b6:a6:6a:0c:cf:31:69:
a2:63:f3:90:63:be:da:7e:06:4b:35:72:86:36:05:
4d:59:91:81:4c:f4:2c:34:c1:d7:07:ef:76:b2:fa:
d6:7d:a3:44:d3:40:2e:f1:1f:0c:2c:cf:79:0f:4f:
49:13:64:5c:a4:a9:6d:f6:ee:4d:e1:50:79:89:e1:
bf:73:a3:79:72:cd:3c:d2:f5:7d:d8:d5:d8:26:7f:
bf:ca:eb:54:97:ec:7c:e5:fd:8e:fe:1d:34:e1:73:
b3:d3:8c:f1:4c:a5:94:c8:03:27:10:67:50:79:f1:
e8:63:dd:6c:25:79:b8:fb:fe:54:2c:25:0a:5e:60:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:63:30:24:54:89:BA:53:EF:61:AA:1A:C6:72:E2:CE:34:EA:42
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:e8:c6:ba:2a:aa:2e:32:b3:ff:62:e4:83:f5:20:3b:42:
e7:c8:75:b2:17:76:7c:06:3b:ce:e3:78:bd:f6:86:9f:a4:9f:
91:f9:22:14:12:f5:96:c8:8b:c5:73:c2:d6:ec:6a:c3:a5:5f:
8a:cf:cd:61:d9:e9:8f:30:52:4d:9e:03:4c:95:5e:e5:08:11:
f1:a9:78:76:3d:d6:ef:13:78:b7:e1:2c:c7:0e:34:0a:ed:89:
83:3f:ad:47:85:99:13:d7:de:3e:2d:97:21:ec:6f:30:34:68:
12:49:53:1f:e4:62:6d:cd:cc:ca:3b:f7:40:26:b7:87:34:a9:
f3:83:7f:f5:4b:6e:56:31:64:8e:bf:55:71:55:5d:29:13:b0:
b4:09:2b:84:e2:ed:0b:e0:09:0c:78:a4:ff:8b:37:3b:f1:18:
5e:ca:cb:46:12:a7:d7:aa:49:27:68:62:63:91:2f:ed:a1:dd:
12:42:a7:2d:0c:2b:54:ba:5a:39:22:e9:81:46:74:7e:3b:a4:
21:df:ac:03:9d:18:fd:ff:ed:34:fe:d7:ad:8a:39:d3:ac:b0:
27:2f:8b:0f:6a:af:54:25:78:96:74:21:6f:3f:d4:cd:92:cd:
86:61:6e:78:84:45:bb:a0:d8:2f:ac:b3:c0:4e:b1:2e:78:ca:
34:78:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:14 2025 by rpki-client