Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: q8nEsgvyU5FFD2BrGTugJw+oPvCW6GauJYj5xwQTKC8=
Subject key identifier: 6F:14:95:2E:53:9F:8D:48:3A:AA:5E:34:60:65:6D:28:54:2F:F0:90
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 019A4FD03BBCC46DF90BE589727F5C424A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 17:00:38 +0000
Manifest this update: Tue 04 Nov 2025 17:00:38 +0000
Manifest next update: Wed 05 Nov 2025 17:00:38 +0000
Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: xukq5ms4usLgplrifgl86hamFxuh6GeT5aHCo5nTzPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:3b:bc:c4:6d:f9:0b:e5:89:72:7f:5c:42:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Nov 4 17:00:38 2025 GMT
Not After : Nov 5 17:00:38 2025 GMT
Subject: CN=6f14952e539f8d483aaa5e3460656d28542ff090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:e8:ea:d6:2d:32:5c:0a:03:1b:e8:46:03:
a7:e1:23:0d:fa:e3:2d:27:5b:ed:d4:0e:b4:cf:8e:
0c:36:f5:d0:65:7b:1e:53:3d:e3:98:fc:44:81:3c:
f6:03:24:9c:24:7a:f6:a5:1f:f1:b7:9d:ea:b5:52:
69:b2:03:19:4c:08:a4:29:f6:ce:16:de:3f:51:48:
99:99:e2:f9:89:5a:29:82:41:fa:7a:34:8e:8a:5a:
e6:8a:d2:57:e6:fa:29:92:2e:93:18:57:e7:1c:ee:
b9:af:44:fd:f0:1e:c0:3f:53:9c:2c:c4:4f:ce:fe:
90:d3:ad:cb:c1:c4:4a:50:e8:df:41:b6:ad:26:8a:
c8:fb:53:b2:ba:46:07:42:05:56:f7:5e:79:fe:25:
01:7d:9f:e8:ca:54:10:5d:53:f6:8c:b5:b5:9e:a9:
ca:33:4e:79:53:eb:fb:36:63:00:20:5d:3b:fc:f4:
c1:49:2b:31:b6:cf:31:79:0a:a6:e7:3a:4d:0c:8c:
bd:9a:41:10:19:ae:90:13:b4:47:1c:45:81:3f:62:
a4:96:d3:02:e8:7a:1a:20:16:2a:2c:53:8f:71:df:
3a:44:80:5d:70:bc:d7:71:5f:b4:1b:fe:69:54:09:
56:78:47:23:29:2c:49:ce:e7:62:d8:d7:97:5b:a2:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:95:2E:53:9F:8D:48:3A:AA:5E:34:60:65:6D:28:54:2F:F0:90
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4b:ee:b2:a6:5c:e1:a8:e9:4b:50:ca:9d:85:df:08:4b:c5:
59:47:37:c8:ef:91:7d:b1:f2:ff:b2:46:1a:65:b8:57:41:86:
5f:3a:01:a9:34:1c:99:69:fb:92:5a:d5:fd:10:7c:47:ba:3a:
17:9d:34:d8:13:8a:2b:81:99:b3:4c:ae:2c:a8:b7:fe:87:bc:
aa:af:ec:7d:b1:fb:75:4c:79:c0:ff:8d:8a:6d:57:70:83:3d:
c1:74:6e:b6:c0:72:f3:ba:d8:91:89:74:76:62:9b:69:06:d3:
91:db:2e:4d:36:67:f9:4d:62:a0:27:3d:15:e4:00:27:37:23:
20:d0:6c:23:fb:52:0a:a3:ea:33:bc:76:44:b2:09:94:68:4e:
6e:05:99:53:4b:f4:6a:f9:53:14:16:8c:98:41:36:a5:50:69:
29:91:f0:7b:2f:97:c4:a0:ad:49:35:db:7d:39:e6:8d:28:66:
3e:05:23:80:f7:aa:f3:d2:cb:2f:8e:dc:78:eb:7c:7f:2e:6c:
15:88:2d:ce:b7:ae:df:19:2c:05:86:1c:1d:c2:0d:87:39:96:
32:4b:f6:ff:d7:27:e7:61:a5:58:cc:51:9a:65:e6:37:5e:8d:
b8:ac:da:2c:dd:02:e8:62:c3:16:f5:0f:b5:8d:d1:94:cc:86:
13:93:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:56 2025 by rpki-client