Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: HhIT4S8VL1GRAjyYyiCf0oLXy10P1pVpnxljOPYU+Dk=
Subject key identifier: 16:2A:39:73:5D:48:2F:76:CD:15:98:74:C4:4B:87:F2:61:F0:E1:C6
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 019A4EF5987FFC6111408B48CFEBB4750326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0F27
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: udfo/5NqAP67enijeA1L+jDqHVIc0xWKrkapQWqTqWY=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:98:7f:fc:61:11:40:8b:48:cf:eb:b4:75:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=162a39735d482f76cd159874c44b87f261f0e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:39:a7:c0:da:e5:6f:67:9e:bb:3f:b2:a4:
c7:e5:1c:42:bc:9c:8f:cb:91:04:02:63:b9:29:57:
68:46:74:29:84:e7:f1:89:ba:71:47:86:3e:80:e1:
7b:29:d5:c6:87:e4:eb:35:f8:76:42:1b:c8:f3:18:
44:fb:d1:12:69:ff:0a:e2:d0:47:28:4e:98:f0:52:
1c:57:e4:2e:b4:44:8c:27:25:72:6a:3c:86:c3:20:
b3:ac:6c:5f:50:31:0e:13:9a:e9:54:a0:49:a9:4c:
1b:f0:14:c0:d4:ad:22:6b:95:03:46:a1:15:13:a7:
5f:9a:3a:c6:ef:4a:40:a9:83:35:0d:3b:dd:01:16:
8a:d6:5c:2f:77:b9:fb:4b:1a:37:6d:49:ef:79:47:
fb:f5:5e:a6:b1:48:ca:60:38:68:8e:9a:af:57:62:
4d:0d:ea:e5:3a:df:64:3e:98:96:b3:92:0e:d3:fd:
2e:9a:79:fa:f3:13:6f:ba:b9:6a:be:b3:81:e3:4b:
12:5e:68:11:57:b3:1e:51:52:e1:8f:3a:58:b4:e3:
14:aa:1d:fc:a3:ee:b2:d2:16:24:50:09:72:a4:98:
27:c3:06:d4:80:18:0d:11:f4:d6:a7:cc:a6:3c:b4:
1d:f2:f9:1c:81:cb:40:86:18:a9:d2:71:22:f9:40:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2A:39:73:5D:48:2F:76:CD:15:98:74:C4:4B:87:F2:61:F0:E1:C6
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ab:9d:64:c1:9b:a3:ab:06:ce:02:92:e8:2c:0b:71:b3:44:
55:17:f8:fb:59:4c:5c:84:94:b0:fe:37:f8:34:b3:9e:e4:08:
22:fc:63:b5:51:01:73:01:23:2f:41:61:79:5e:d0:9c:ac:f3:
de:a7:98:49:a9:4f:36:63:92:95:da:11:ac:09:8a:76:8b:36:
60:60:f6:8e:87:89:bd:f6:8d:a4:3a:f0:29:40:2c:cb:8a:68:
6b:b4:95:2a:02:da:e1:27:3c:e1:0b:9d:2a:57:2c:2a:eb:03:
77:20:bb:92:18:c8:05:be:8b:1f:f6:e3:7b:72:94:a4:4c:99:
28:05:67:ce:c2:14:08:f3:dd:f0:d9:fc:16:61:8d:ba:b6:d0:
9d:24:1f:66:c7:94:16:45:5b:05:ab:80:c0:e1:ea:34:6b:e3:
8b:71:6f:38:fd:d8:81:5f:53:90:f0:57:da:21:e7:20:88:6f:
34:97:dd:88:66:dc:f0:3c:37:65:d1:5c:f1:70:23:5e:11:f3:
fd:87:96:46:20:70:06:3d:d9:9c:38:a0:1b:dc:a5:3b:17:bb:
fd:c7:03:df:a0:5e:92:de:4c:8d:80:9f:d1:70:5b:31:a8:10:
65:c5:21:a4:bf:a2:06:95:a5:2a:37:36:16:ed:c4:9a:1c:4d:
ce:8c:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:38 2025 by rpki-client