Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier: 6gh9T7X87ka4KG0G5ehDVH2k6P7JBn3fN57FvDNFaGo=
Subject key identifier: 5F:43:F6:9B:A6:0E:9D:9C:3A:73:A2:42:2F:4D:E4:4C:D0:9E:A2:2D
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 019A50752E2842EFE14C67AD5B472134936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number: 0FF4
Signing time: Tue 04 Nov 2025 20:00:48 +0000
Manifest this update: Tue 04 Nov 2025 20:00:48 +0000
Manifest next update: Wed 05 Nov 2025 20:00:48 +0000
Files and hashes: 1: 1Va9-VCRLq6nfmhgDYPY9z50vR4.roa (hash: ESx+goLfyktPxcscMRpU8+hvhVOyXeN96tMCeWI/nlM=)
2: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: QnQTste/CCfrI5cdVen9I6GO8UMBLL3maA776L4xKZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2e:28:42:ef:e1:4c:67:ad:5b:47:21:34:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Nov 4 20:00:48 2025 GMT
Not After : Nov 5 20:00:48 2025 GMT
Subject: CN=5f43f69ba60e9d9c3a73a2422f4de44cd09ea22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:85:af:3b:7a:35:a5:5d:ea:0e:cd:6a:c9:
a5:cc:7e:4b:e3:21:34:5f:25:d2:8e:25:07:d0:38:
09:51:05:a9:9a:48:cb:6f:82:d7:4c:43:0b:f3:a8:
c4:42:6f:60:29:82:7e:19:52:0f:34:07:ec:2e:85:
23:c9:4f:f8:03:cc:0b:97:c6:9a:f8:32:b3:ca:e3:
74:9d:2f:ac:0b:8f:1a:f6:8b:26:62:c8:93:bc:fb:
bb:ef:d3:3a:15:46:84:5b:2e:89:21:9e:e1:11:f7:
07:2f:8e:53:25:06:cf:5d:18:bb:e9:10:4a:66:07:
f6:ed:d4:e0:bb:a2:ec:c8:b1:e9:a3:32:5f:5a:3e:
0d:82:0e:f3:48:d5:83:40:7e:89:aa:52:8e:0e:37:
d5:00:9d:ca:d2:4b:e6:17:cf:81:1b:00:3d:19:64:
2e:02:32:1e:70:8f:15:f5:d0:e5:a8:ec:d1:22:06:
37:30:37:cf:68:bd:d3:56:00:77:07:56:a6:51:2d:
a0:c4:ff:67:ae:ed:11:69:c1:08:11:96:c8:3f:0a:
ed:84:ec:c2:f4:fe:30:b8:d2:cd:d7:5b:97:70:49:
c2:55:1d:d1:90:2d:92:08:7a:f2:ec:03:cf:dd:29:
8e:3c:61:d8:f5:be:b7:94:09:f1:70:41:d1:8e:0d:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:F6:9B:A6:0E:9D:9C:3A:73:A2:42:2F:4D:E4:4C:D0:9E:A2:2D
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6c:84:6a:5b:3b:59:5d:cc:ab:70:34:08:f4:5b:80:e7:5f:
91:78:88:45:bc:f9:9b:0b:b1:6f:30:f4:0e:0a:e8:cb:0d:f5:
ea:f6:32:60:1c:fa:50:a8:1c:57:82:5a:c7:8c:1e:e5:6c:e6:
d2:c9:6a:1c:65:f5:1b:8f:c7:fb:02:99:e5:c0:eb:86:74:6a:
c3:58:be:5a:34:37:06:31:59:bb:58:5f:a4:36:56:be:79:a5:
81:fd:95:fa:9b:9e:22:5e:87:db:ce:8e:56:08:c6:ac:10:ae:
bf:6f:4f:65:82:19:f9:ec:44:3f:9c:a7:45:98:c4:64:bd:35:
c1:d7:1f:83:b1:24:d4:f9:69:6a:c4:a4:76:35:0b:40:14:3c:
f9:36:0e:0a:af:7e:18:88:3b:33:f6:db:09:f0:7f:d0:ab:ca:
9b:71:18:91:38:5b:01:f0:83:55:a5:75:a1:c1:29:4b:b4:ed:
ec:46:16:bc:36:f1:18:36:5b:56:3c:73:5c:c3:50:c5:43:c3:
b6:71:b4:54:a5:db:65:7b:a6:91:eb:c0:99:af:1a:25:93:49:
de:b2:d2:40:4f:1d:b9:8b:a5:8d:f9:32:89:7e:45:de:8f:cd:
d6:bb:43:c5:37:d3:75:43:17:27:91:73:e1:eb:72:d7:93:ec:
80:40:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:39 2025 by rpki-client