Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: z1Uls1rWNZmCe69CZ8FFiKqkpqIYtaAdEx1SWSykc94=
Subject key identifier: 64:F8:27:52:70:29:3F:BE:27:17:59:A4:84:81:7B:5A:16:9A:CB:69
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019A4DAA9DFDE56FA00D5230978B37616DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 11C7
Signing time: Tue 04 Nov 2025 07:00:18 +0000
Manifest this update: Tue 04 Nov 2025 07:00:18 +0000
Manifest next update: Wed 05 Nov 2025 07:00:18 +0000
Files and hashes: 1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=)
3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=)
5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: YlUjlIyFrjo1xjFTe/facKDYkjQY67bvmv3SEtWX9lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9d:fd:e5:6f:a0:0d:52:30:97:8b:37:61:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Nov 4 07:00:18 2025 GMT
Not After : Nov 5 07:00:18 2025 GMT
Subject: CN=64f8275270293fbe271759a484817b5a169acb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:fb:19:8c:4b:cf:31:0d:4e:06:ab:0a:b2:
19:e8:1f:84:94:e6:af:f3:4e:c5:be:0c:07:fe:73:
bb:d4:92:8a:08:e4:4e:92:c0:26:05:72:08:93:ae:
0f:a7:41:fb:67:90:6a:ce:72:eb:f6:1a:79:6b:39:
91:ca:76:a5:07:33:05:dd:0a:2b:69:c0:4e:81:e8:
93:9d:dc:fc:09:30:6c:df:b6:07:b3:65:0b:51:9a:
16:40:30:9b:55:3d:12:57:47:0e:b4:9d:4f:52:a4:
ae:01:1f:a8:19:47:48:a4:13:a8:70:9b:27:a2:1c:
c3:09:7f:92:b0:44:e4:e2:75:4a:4e:a9:e4:d4:d5:
37:5f:ec:4b:ac:7b:da:dc:10:c6:40:27:d2:78:b7:
5c:55:34:c3:75:c2:6e:15:0c:74:f3:2e:c7:de:38:
23:61:e9:53:58:b4:a6:14:c8:68:c3:41:21:ab:15:
9d:e2:84:65:35:e8:31:29:e1:e8:51:79:23:4f:c6:
5d:dc:8d:1a:f5:43:c5:12:0d:1b:da:cd:cd:6e:9e:
fe:ef:31:69:bc:61:d5:2e:91:7f:b5:1d:39:32:bb:
88:fd:a3:07:e3:06:4a:59:9e:d6:63:df:ab:e4:99:
f1:91:97:e3:73:d3:99:aa:c6:49:ac:73:55:c0:a9:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:27:52:70:29:3F:BE:27:17:59:A4:84:81:7B:5A:16:9A:CB:69
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:39:42:ec:35:80:6c:bc:d4:c6:f3:a3:f6:03:87:d0:70:a7:
0f:27:b9:3a:95:c9:f1:87:8f:a7:d6:69:69:d9:40:ad:a1:3c:
75:97:bb:8d:9b:44:68:cc:5d:92:e7:ca:54:57:8f:65:4c:4c:
70:0e:26:52:16:65:1a:b3:8c:cb:6e:4f:9e:62:74:6c:f3:14:
aa:a4:91:e5:18:3d:7f:21:96:16:09:6d:2c:c2:a7:61:a3:3c:
41:f7:26:a6:71:75:6c:6c:4c:26:27:1f:74:69:3f:0a:aa:3f:
6f:01:56:6d:14:d1:cd:72:48:4a:0d:7a:7b:2a:ab:3e:29:c0:
c7:df:10:0a:d2:fb:15:e8:0e:90:d8:ce:4a:72:6b:7e:cf:41:
06:f1:ea:7f:b6:c0:3f:0a:97:f0:1f:4e:b5:68:28:a8:a5:2a:
fc:00:e1:0c:eb:96:4a:50:42:f2:b5:fa:1e:3f:b9:0a:3f:43:
de:e9:8e:2a:ef:e0:54:30:c8:fc:bc:db:ac:1d:94:52:99:1d:
26:50:1a:9d:f1:dc:bf:8a:c1:b0:e3:91:a9:dd:8e:3a:eb:47:
21:34:3f:77:12:d2:70:be:c9:88:4b:bb:43:87:d5:4a:4b:d4:
33:fa:5b:04:aa:89:5e:2c:ad:2a:84:52:c6:27:45:10:bf:a6:
7b:6e:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:14 2025 by rpki-client