Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: 9qP/Tv0bkofMRYeqliD3ePDY3r3UUbzlgq9C80S1F/k=
Subject key identifier: F0:43:82:21:90:5E:19:5F:A9:EF:A9:C1:88:7A:DB:11:F1:62:30:65
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 019A4F62898BC82E527C8DED5DA946266E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 1240
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: tXzNaWudUjrPCwtVphykcpSXhV7/mb7yzIina7FzUok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:89:8b:c8:2e:52:7c:8d:ed:5d:a9:46:26:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=f0438221905e195fa9efa9c1887adb11f1623065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:11:03:dd:59:52:ea:98:50:50:0b:96:ac:
4a:21:2a:5d:e4:ec:e9:82:e7:8e:ca:8c:f1:1c:e8:
46:5c:a9:0e:21:b7:f9:15:ce:e0:4d:b0:11:fc:bc:
ce:84:98:c6:aa:d1:f5:d9:22:28:0c:c7:b0:1b:fe:
eb:92:80:17:15:5e:82:02:76:3f:f2:1e:0f:d0:62:
04:38:fd:d1:76:93:c9:ce:81:41:a3:1f:d9:44:95:
4e:5a:fe:21:f1:4c:57:da:9b:92:21:8f:7c:97:5e:
1e:6b:a0:49:5c:a7:43:ae:43:55:ff:25:68:10:5f:
b4:2f:5f:cd:fb:d0:a3:72:28:cd:49:3e:27:11:d8:
41:3d:08:68:89:43:70:87:6a:ea:b8:b2:09:f4:ec:
9e:7f:d8:0b:54:4a:9d:94:a4:bf:37:c6:3e:65:9c:
91:36:2b:4b:7c:d0:44:48:6f:49:56:5f:76:13:f7:
98:61:9b:8b:c3:4c:b4:95:d7:c3:78:da:8c:d5:60:
34:84:b0:19:cb:69:c7:98:8b:13:6d:15:05:52:4d:
61:48:d1:dd:5f:41:d7:92:08:b8:17:36:d7:5b:e7:
f8:ae:79:94:30:a6:c8:9b:1e:1c:a5:65:d3:49:b6:
9a:6d:db:95:24:2e:cb:53:ed:99:02:fb:8a:d5:68:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:82:21:90:5E:19:5F:A9:EF:A9:C1:88:7A:DB:11:F1:62:30:65
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:64:49:34:7f:81:c6:50:97:2e:8a:8e:48:69:1e:f7:98:
1c:59:84:2e:19:2b:9a:f0:fc:3e:c0:38:fd:2d:d7:d2:57:de:
1a:fa:00:35:01:fe:d0:d8:56:82:d6:92:79:14:93:de:1e:27:
75:6a:3b:94:0d:f7:95:f9:b1:c6:4f:26:fa:f1:36:54:a6:97:
5e:4f:6b:29:b7:ef:77:77:b5:8d:33:69:6e:37:2d:e1:7f:ee:
b5:10:4e:36:3f:d0:9b:5e:12:ae:a7:e9:4b:71:75:eb:f5:3f:
a3:ee:d2:d4:f0:70:c6:3b:47:5a:da:48:a7:0a:49:36:75:fa:
fa:55:45:d8:9c:b0:77:ff:eb:e9:6d:ce:21:8a:8b:f4:c1:14:
2f:16:60:96:17:a2:05:32:f5:54:6e:23:e3:3c:6d:4f:43:dc:
c1:1f:2c:36:9a:d7:8b:80:57:a3:5d:9e:d8:c4:d5:1c:b0:19:
11:9e:4b:76:a2:2c:41:fd:93:8a:f4:b5:63:5f:28:c1:e9:8e:
89:66:bd:c7:a3:03:41:8c:28:a2:e7:df:c4:89:c7:d0:2e:5b:
d3:1a:3a:97:19:4a:d2:90:68:bb:9a:a4:d2:34:89:21:c0:4c:
44:56:35:03:36:30:29:63:75:bf:18:39:32:da:b3:51:7e:52:
a0:9e:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:07 2025 by rpki-client