Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: 3+1KSQ1KIyL+U/r7xXJ0dGKdsNo96QPg5vt6P871Iio=
Subject key identifier: CE:23:1D:C7:E1:2E:33:73:1F:91:6E:89:EC:C2:D5:6C:A4:B4:BE:32
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019A4E86C9B5A8A8DD8DD02535698D447FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 10DF
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: 5rFkjTQhvP4AlLZrLdLxCGrop0ryxfK6hhtOQ6/Kwk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c9:b5:a8:a8:dd:8d:d0:25:35:69:8d:44:7f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=ce231dc7e12e33731f916e89ecc2d56ca4b4be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:5a:11:74:da:ef:77:ce:b0:cf:57:9f:08:
b6:ea:4e:7d:ab:91:7f:fa:36:ba:a8:7a:95:d2:b8:
8f:13:94:8e:4c:64:f1:2a:c2:19:c6:66:ab:34:3f:
ee:0b:df:7b:a8:5d:1f:31:b1:fe:bb:09:38:b2:97:
7f:b1:29:64:8b:f3:1d:d2:88:15:0c:ec:3a:f0:56:
ae:14:c2:77:b2:a9:79:07:11:53:38:7d:99:1f:ff:
21:b9:c5:98:69:a1:11:65:49:52:1d:9e:65:32:b4:
9f:65:4e:68:18:19:82:03:96:d7:87:1e:e3:d4:93:
56:28:87:e7:76:07:6a:4a:9e:f2:7a:5e:7e:da:69:
c7:d9:af:7b:38:16:71:30:97:9c:a3:1b:fd:26:c6:
cd:9d:4d:78:05:fc:9a:ad:d2:fb:75:21:b1:5a:fb:
c2:00:10:d6:c7:03:9c:31:d2:92:1e:53:fd:3a:b9:
ee:b4:f5:70:e6:53:c1:b5:6a:14:bb:ac:11:5d:2a:
b5:10:d9:ec:c5:6a:76:70:e6:4b:71:bc:25:dd:3f:
22:cf:05:23:23:90:4d:3e:98:36:a2:d0:4c:99:e2:
11:a2:1e:eb:5b:7f:af:b3:5f:38:11:99:43:1a:57:
3f:9d:05:d0:27:f2:95:3b:68:51:fb:cd:92:22:22:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:1D:C7:E1:2E:33:73:1F:91:6E:89:EC:C2:D5:6C:A4:B4:BE:32
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:29:c3:c2:ba:1f:ce:1b:5f:5f:23:c1:6a:66:be:ce:7d:e0:
d4:a5:e0:9a:46:af:04:26:6f:ce:40:a8:32:a2:a9:21:05:c1:
9b:2d:cf:94:5b:4d:86:1d:db:d6:67:50:6a:5d:46:9a:7c:4e:
56:6e:ba:6b:35:1d:18:ac:ec:b1:1e:a9:d3:f7:1a:17:08:a7:
6c:f6:9c:94:cc:a9:d5:1f:da:ac:45:34:f8:4f:ae:d8:d2:6b:
02:d1:94:2f:92:26:fe:60:d6:b5:36:15:81:ad:8b:12:62:b7:
45:8c:70:51:dd:36:45:3e:61:af:c9:b5:df:14:d6:29:09:d5:
8c:cd:10:35:84:bf:2b:fe:62:d3:d6:80:40:32:d2:ad:dc:62:
c0:07:80:52:83:58:36:7d:55:76:11:5f:9e:28:93:ec:52:18:
61:d8:b7:cf:e0:a5:05:48:be:80:8f:bf:98:8b:15:d7:61:26:
de:8c:64:a4:35:5d:7c:4f:5e:73:b4:ab:43:14:58:de:ea:18:
4e:22:11:41:0b:61:b5:eb:7e:a7:57:25:c9:c3:82:c6:98:10:
56:05:d1:8f:d1:c8:3c:aa:f4:84:82:8b:b1:96:7f:8c:4a:eb:
22:1f:ab:ac:e2:ab:03:45:c0:5d:8a:8d:8c:c8:c6:44:46:34:
33:b0:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:03 2025 by rpki-client