Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: jIyb3v4pB67NadDd/uwI/hk2URDBmJLfodHhCvXlW9g=
Subject key identifier: 5F:42:E4:6D:52:B9:3C:59:F2:11:0F:0C:52:74:34:0B:68:DB:E2:30
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019A4E50048A8FB431824ED66F755C897C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 110F
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=)
2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: I57H2KVgwokT4/fgpvTB76yWuZOz1HH2LfDGspIahFA=)
3: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
4: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=)
5: pcXYlaDPwjog7iEv3SU8SnXzBAo.roa (hash: /AdWWJb1IqZ42mmM/SvQrc5HCBK96OSXdfXnx0nlkCw=)
6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=)
7: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:04:8a:8f:b4:31:82:4e:d6:6f:75:5c:89:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=5f42e46d52b93c59f2110f0c5274340b68dbe230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:8a:7f:7d:05:9f:d8:c6:fd:d6:cb:50:cd:
15:8e:c8:2a:8a:1c:25:fc:7f:16:87:3c:07:7c:78:
8f:d2:f4:8d:fe:1f:a7:4e:33:2a:cf:3f:11:f3:3c:
a9:fb:d2:d3:c6:69:c7:60:7a:ab:09:9e:12:2d:e6:
9c:e9:d5:7d:a9:d1:c6:d9:78:00:e4:ff:12:17:f7:
2a:9f:a6:90:06:07:3b:e9:2c:ff:92:ba:8e:cb:bf:
cf:f7:dc:60:6b:10:cb:a8:a3:82:80:1d:38:05:d4:
34:53:0e:75:ec:41:ab:7f:02:e6:51:24:2f:27:85:
bc:5d:77:6d:88:ed:c8:5b:6b:0b:06:c9:5d:cd:b4:
70:55:50:5d:3c:25:6b:49:10:31:a8:69:0f:b8:34:
f4:f9:f6:87:74:17:59:6a:35:29:9d:5e:26:19:2c:
88:9d:20:34:50:21:0e:e9:14:8b:12:e3:2e:8c:4a:
f9:16:b7:8f:fd:3b:82:f6:e7:9f:2f:fe:f7:54:0d:
16:68:f8:a5:2c:2a:18:94:9f:df:a6:b6:2a:d5:1a:
f8:de:6b:46:4f:1f:91:70:5d:76:f3:06:90:be:de:
83:f6:f1:f6:35:24:cc:63:99:25:73:7d:a7:d7:2f:
36:e1:f0:b7:62:1c:7a:7f:df:7d:ad:f7:ce:2a:58:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:E4:6D:52:B9:3C:59:F2:11:0F:0C:52:74:34:0B:68:DB:E2:30
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6f:30:b8:51:2e:68:b9:a0:07:ef:89:72:63:e3:a1:50:ca:
c4:cd:77:b0:53:0d:81:4b:63:97:b2:9f:d8:6b:df:dc:7d:17:
40:0b:cc:bc:cd:45:a6:40:9a:b9:06:ef:35:a5:21:cc:5c:ea:
d7:a9:c0:e0:8a:6c:3c:bc:1f:44:00:14:d9:ac:61:64:b6:06:
95:76:4d:5d:ed:06:58:52:52:57:76:4e:09:6c:ac:ad:da:2d:
64:1c:e6:24:4c:c4:ee:8d:3e:01:ef:3c:dd:2d:60:2e:4f:e8:
a1:a2:19:e1:9e:57:08:bb:2b:76:e1:12:2c:51:ca:5b:26:85:
7e:51:d4:e0:89:c8:15:4b:93:9c:bf:54:4c:5b:39:84:56:d7:
3c:f6:48:96:ee:fa:3b:8c:c9:a2:72:e5:81:26:49:fc:0b:29:
81:40:ae:d0:32:79:c5:f8:b5:95:8e:6a:d0:f8:17:aa:bc:89:
ea:1b:76:d0:1f:c6:bc:54:a9:73:5e:e9:88:a3:95:79:b4:ef:
e0:c1:e9:94:83:34:0a:c2:39:79:63:27:9e:29:c5:cb:ef:5c:
71:2c:00:51:c4:a9:3d:4e:59:3e:2c:af:ca:bf:e9:7d:fd:34:
f0:54:98:fa:dc:61:38:7c:1d:67:10:36:54:34:84:95:27:c2:
6d:a1:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:05 2025 by rpki-client