Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: F0Kro+EgFo+vaTj7RddwrIvNvTQa9UowCdexvSu5IW8=
Subject key identifier: 54:32:08:7D:4E:60:C7:10:20:41:44:C8:DA:76:51:12:E0:3D:69:8C
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 019A4E8694C772CFAD52259213817BC362B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: 51NXVgAr2I1eXTe9a9kizTFuHJ4.roa (hash: 1iN5vxfuwXGFtbxcnMWPqsUykL0ZxXTKprGUJelmE44=)
2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: BcXnZSCqKGqzJnB5xw2wNWS9aIj9Q60G5Mv7IVyD1PI=)
3: bzGs0AfDNETTzCPGuhNEtlqP4Lk.roa (hash: W1PVimH7iIBpOpHAPclX+yhqZLE6KhqWf6pI/1uvpY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:94:c7:72:cf:ad:52:25:92:13:81:7b:c3:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=5432087d4e60c710204144c8da765112e03d698c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:ad:a4:bd:c1:e5:cf:da:41:ce:c0:b4:1c:
cf:81:c1:7e:4a:88:45:bf:71:01:d6:cb:bc:7b:68:
d1:f5:29:63:28:05:8d:78:d8:fe:44:d7:32:02:57:
7c:80:8a:4a:21:9f:fc:8a:1c:d6:68:8d:a0:15:c5:
f8:c3:e7:81:57:22:6f:11:aa:c1:d6:ca:78:c4:fb:
79:a3:66:98:03:d0:1d:a6:dc:f1:c0:b1:e1:06:00:
24:d7:4d:45:48:49:e4:0d:d7:cd:67:8f:43:0c:d4:
fc:a5:87:77:ec:a2:a3:e7:fe:38:b2:72:e6:f0:d5:
4c:ca:6a:38:6a:84:a1:86:a7:74:f8:3d:3b:04:cf:
d2:c0:85:4c:04:4e:bd:d7:4a:a5:69:06:df:30:4a:
3a:5a:d5:b3:5b:02:70:57:4e:98:45:7a:6c:26:7a:
7f:27:5a:0f:7a:5e:3c:dc:1f:25:1b:11:d4:f8:98:
fe:0e:e3:bf:b1:75:ab:52:b9:74:2a:33:0c:d5:ca:
ff:30:f1:26:ce:2c:21:a4:46:7f:c9:78:94:e1:7a:
c1:c9:e4:75:78:58:fb:bb:63:91:88:ca:aa:50:d4:
f8:ab:00:fe:d9:9a:5e:db:67:d7:ee:6a:3f:26:00:
2d:cc:f8:8c:15:48:dc:3f:b2:fa:ee:4c:d7:bc:40:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:08:7D:4E:60:C7:10:20:41:44:C8:DA:76:51:12:E0:3D:69:8C
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:5c:7e:d5:cc:5e:54:71:75:dd:2a:12:9a:48:8e:f4:8e:
91:52:b9:4b:bf:8b:4d:d1:df:80:2e:70:1c:8e:1c:20:38:e2:
d1:ef:99:cb:be:b8:da:f6:a3:4e:ad:58:c6:4d:0c:a3:21:f7:
fe:e7:65:2e:99:92:28:fb:13:d6:e7:9b:cb:c2:ad:e2:f4:48:
18:79:6a:fd:f1:81:c1:8c:d9:48:8e:22:87:ca:ea:7b:d5:83:
1d:90:8e:de:42:64:49:47:7d:97:15:de:d9:1a:3f:3e:7c:ed:
b0:5d:cf:fe:7e:68:dd:be:a4:f5:89:5e:9c:9b:8f:14:82:b1:
3e:87:29:8c:ed:a7:32:5f:57:b8:cc:3f:58:25:bb:86:ae:17:
4c:82:c6:f0:f8:81:8e:f8:63:81:66:cd:c8:6b:79:b7:26:b6:
be:a5:8a:47:aa:f1:13:58:9a:ae:96:81:2d:ae:76:f6:87:62:
13:6a:3b:1d:90:f4:25:e5:6a:e0:4f:b4:c8:61:8c:39:b5:e9:
b4:55:d3:49:4f:b5:26:e2:84:5e:63:fa:26:6b:bf:8a:c3:35:
91:08:9d:e8:09:a9:8b:d9:4e:4f:19:56:51:ab:bf:8c:6a:5b:
3c:f2:95:04:6a:92:71:41:c4:dc:53:6b:65:eb:41:4e:27:f6:
88:b4:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:13 2025 by rpki-client