Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: m5O7E870n5S+rsSuoE2SxoTFhSnRWtFHX3psuRfFeqg=
Subject key identifier: 02:9E:AF:46:50:23:E5:5F:C6:34:36:A4:A0:E4:5E:EA:B9:39:1B:45
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019A503DAFA7016AB18055AA88F7ED900E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:11 +0000
Manifest this update: Tue 04 Nov 2025 19:00:11 +0000
Manifest next update: Wed 05 Nov 2025 19:00:11 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: PGVxmGR1wtN+HXFh+f9aLH3bJuCrKYnmxc+wYJyXFNQ=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:af:a7:01:6a:b1:80:55:aa:88:f7:ed:90:0e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Nov 4 19:00:11 2025 GMT
Not After : Nov 5 19:00:11 2025 GMT
Subject: CN=029eaf465023e55fc63436a4a0e45eeab9391b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:d5:86:34:a8:11:87:c9:dc:b2:1b:53:11:
67:d6:3f:6e:d7:97:cd:3d:c3:56:6f:d0:64:95:5a:
79:4f:a8:45:33:40:f4:5c:ed:b2:3a:89:19:8a:45:
55:93:c7:f4:73:c9:0e:a5:87:25:9c:5b:30:d6:be:
23:cc:eb:71:1d:40:21:76:48:13:02:4a:18:4d:55:
af:04:51:04:fb:c3:f0:87:d1:b4:3b:a2:de:7a:fc:
eb:be:9c:73:37:a2:fe:66:da:88:d4:40:63:98:09:
b0:e3:ae:63:e6:71:ac:c6:d5:54:99:a1:be:da:9f:
4f:7a:cd:95:a7:1f:47:10:13:d2:cf:4f:fd:62:84:
39:7f:28:53:02:a2:90:87:ee:36:59:b0:6f:98:43:
f3:44:c4:96:7b:95:a1:06:6c:48:f6:61:dc:e8:d6:
49:cf:de:29:14:2b:05:56:2c:79:76:54:ba:ff:fb:
22:91:fc:f8:80:79:fa:24:d8:10:6c:17:8e:dd:50:
06:c4:cb:1c:f1:bc:85:fe:82:b2:9e:f3:af:f0:3e:
58:70:c2:ca:2f:b2:d3:28:45:95:01:6f:57:06:e5:
12:34:30:8b:5c:6f:7a:46:a0:72:4c:f8:b4:92:7a:
58:8a:88:bb:0d:6e:ae:46:c7:6a:ab:16:52:bc:10:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:AF:46:50:23:E5:5F:C6:34:36:A4:A0:E4:5E:EA:B9:39:1B:45
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:0f:e0:44:21:a8:d4:d5:b9:41:cd:43:d5:11:80:cf:d8:
62:a3:a0:5e:0b:0f:ed:18:3c:a7:61:5c:b9:ec:2f:e1:0a:cb:
c6:99:f4:c4:12:1b:8e:92:a7:18:9e:07:66:13:6a:eb:0f:f6:
3a:b4:de:be:2e:a4:91:63:fa:b1:7a:87:f3:c8:9c:a5:50:0c:
a9:6a:dd:0c:00:f2:b4:61:01:6e:28:0f:a7:31:e9:dd:e1:ca:
72:82:ae:52:6d:3d:37:91:7f:b2:ae:e8:2b:7a:65:95:c1:24:
3b:f1:f4:87:79:9a:09:43:3b:fd:05:f3:a3:a8:17:b3:07:e3:
d6:5a:7d:79:3f:7e:96:9a:37:4d:6e:85:7a:15:12:91:83:ec:
18:0e:9d:f6:8d:dd:55:5a:0f:8e:0e:61:2f:3d:32:12:7a:79:
7e:d2:fd:ae:6b:38:ba:f6:02:db:30:ed:de:9c:b8:24:94:da:
83:be:5f:10:94:4d:19:7a:c9:11:7c:b9:d6:01:de:75:da:35:
43:40:ee:64:01:76:7b:b5:c5:02:29:96:8c:d6:63:85:f6:6d:
c7:7d:86:3b:be:36:21:76:a3:3c:0a:03:8e:af:8d:1a:00:3f:
ed:57:8c:84:47:95:39:33:ef:37:f5:b3:9b:12:86:3b:d9:07:
c8:91:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client