Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: c+jCY0/wOcIPvNtFdNqpiI/HEUEMiApuhDGFrFXX5pE=
Subject key identifier: 6D:C6:C8:11:35:FC:A3:D6:16:B9:BE:FE:3D:D7:56:B5:88:14:89:E3
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019A541B17D0FECD14BE9DE83E36D500940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 13:00:52 +0000
Manifest this update: Wed 05 Nov 2025 13:00:52 +0000
Manifest next update: Thu 06 Nov 2025 13:00:52 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: ia3WJbhjhPcBAJv7XCEc/8axqwytgKe8Ww+ZCnE4YxE=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:17:d0:fe:cd:14:be:9d:e8:3e:36:d5:00:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Nov 5 13:00:52 2025 GMT
Not After : Nov 6 13:00:52 2025 GMT
Subject: CN=6dc6c81135fca3d616b9befe3dd756b5881489e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:58:47:7c:3e:7d:3b:39:3d:f6:e8:05:fb:
aa:2b:5b:32:e7:0a:a3:38:39:2f:e7:97:77:04:83:
96:d2:ab:56:1b:67:9d:1d:4a:6e:f2:40:86:86:56:
51:6e:ac:18:70:ac:08:03:72:38:3d:18:30:93:fc:
94:63:2e:9d:91:8a:8d:62:f4:e8:2e:a4:64:00:a9:
93:48:42:03:b2:db:c6:71:9d:10:1a:35:64:08:35:
ed:eb:03:3d:33:1d:69:f3:80:e8:e8:a6:bf:29:4f:
cd:b5:ab:83:fa:ab:e4:47:17:db:04:db:27:9e:b1:
d9:a8:3b:ea:27:5b:4c:72:aa:c4:1e:c8:ae:7e:e4:
ae:88:88:9c:8c:63:eb:72:a7:8c:45:bb:e4:36:ba:
40:9a:84:56:77:30:4e:16:01:b7:55:03:57:97:8b:
a6:fb:9e:74:60:cc:e4:71:fa:d2:f3:39:dc:cc:de:
f2:4f:95:04:89:bf:37:f8:3a:a2:d6:10:99:9f:f4:
42:c6:d3:d0:33:38:4a:6f:db:46:62:f3:50:2e:09:
2e:2a:77:9a:97:6d:fc:7b:d2:b4:61:3a:9c:6c:1b:
20:3f:f6:c6:4b:41:65:d4:33:db:f8:79:55:9d:23:
82:3d:59:e7:c3:93:89:d5:a0:e2:df:89:21:20:e6:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:C8:11:35:FC:A3:D6:16:B9:BE:FE:3D:D7:56:B5:88:14:89:E3
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:a3:45:5a:0d:7d:0c:ed:d5:50:81:ae:ea:51:85:29:c0:
b2:b9:2f:2b:16:de:17:9c:fc:bc:7b:d7:7a:c1:37:50:79:d6:
18:75:79:fa:da:65:3c:d9:d7:29:96:34:d5:f2:60:ad:b8:35:
ee:b0:1a:14:ef:81:1d:b4:9b:2d:63:7c:2b:5a:d0:ab:07:9f:
92:e5:09:50:67:20:f7:0b:17:12:c2:a8:4f:1b:e8:52:89:33:
45:ba:c9:c8:6e:e0:e0:fe:df:0f:43:4b:23:f2:5a:86:1a:55:
a8:86:48:a5:83:85:70:b8:60:1d:c9:66:6c:b7:ce:37:0d:d3:
7d:66:54:cc:3b:f1:34:4e:c1:fa:a9:0a:af:0c:73:17:e2:b0:
7f:3b:c4:10:a0:71:94:d4:31:65:f8:ed:e2:be:b1:7e:44:ee:
79:38:87:9a:a7:f7:fa:38:5f:0a:28:a7:51:70:03:2b:76:f0:
b9:70:48:5c:67:fa:e4:77:94:9c:6b:01:ec:9f:c2:b2:6b:ce:
66:4a:a1:38:68:20:fd:54:6c:1b:47:37:4f:7a:97:17:d9:8e:
66:be:4d:db:7a:24:f9:f4:0b:66:0c:9e:ef:23:f8:60:2c:ca:
17:30:bc:89:3e:65:8b:86:fd:b7:f4:34:a6:d2:90:a8:99:82:
1e:21:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:07 2025 by rpki-client