Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: hzxOXvjiziR/kjc51bGfjPi02yp0On+IsXwprmMp7aI=
Subject key identifier: D5:7C:FE:AF:05:97:D9:AD:F1:F1:0B:E6:D1:ED:20:C3:FB:A4:17:4B
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019A53E41DD0BADFFA16C97B8203203B22DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0229
Signing time: Wed 05 Nov 2025 12:00:50 +0000
Manifest this update: Wed 05 Nov 2025 12:00:50 +0000
Manifest next update: Thu 06 Nov 2025 12:00:50 +0000
Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=)
2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=)
3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 59jhIXLykBqaDezLDiZAfJfpESQrlFcU3AMZexy3lNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:1d:d0:ba:df:fa:16:c9:7b:82:03:20:3b:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Nov 5 12:00:50 2025 GMT
Not After : Nov 6 12:00:50 2025 GMT
Subject: CN=d57cfeaf0597d9adf1f10be6d1ed20c3fba4174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:63:34:7a:ec:f3:2a:f1:7f:f1:9f:a9:4c:
07:54:8a:04:1e:b3:d2:dd:e0:dd:98:1c:ce:81:b9:
be:0b:d0:76:bb:bd:eb:3f:3b:d3:17:3c:37:fb:11:
ea:3c:f9:c1:bd:59:0e:c7:75:e2:32:de:6a:0a:a0:
75:39:ea:6e:bb:91:c2:ac:9c:e0:cb:a9:ca:33:d1:
18:57:80:d5:92:6e:8a:15:d4:f9:30:63:69:2f:ce:
3d:c1:ee:32:91:05:e5:6c:bd:e7:6c:df:fa:b3:41:
65:34:9b:50:d5:13:6e:8f:68:15:e5:08:e3:ef:49:
c2:b3:10:8c:8c:01:d1:cb:94:70:cf:4c:78:e0:f2:
58:f6:ff:46:e3:cd:77:46:4a:b0:34:1f:87:f1:11:
de:56:7f:d4:77:87:7b:47:81:c1:bd:63:5a:7e:d3:
cf:93:28:4c:30:14:db:23:0b:89:7f:dd:61:3f:42:
9a:42:02:74:3a:d1:d1:1f:db:7b:0d:7f:45:8b:89:
37:37:a6:77:ee:64:23:83:21:4f:5c:84:a7:b3:86:
ca:60:a0:50:59:3e:b7:88:bb:86:44:6c:23:d0:06:
21:f9:b0:ee:7e:82:9a:6b:37:e7:02:40:53:dd:83:
69:8c:3a:2d:af:04:90:15:df:5c:ce:e7:4e:e6:14:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:FE:AF:05:97:D9:AD:F1:F1:0B:E6:D1:ED:20:C3:FB:A4:17:4B
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:10:10:18:8f:39:b5:5d:40:9f:a7:3d:67:51:1b:00:39:
ba:0c:d9:34:76:a7:4e:02:d1:52:71:50:98:6d:8b:02:d2:79:
67:d4:4e:16:55:c3:e9:8e:b9:c0:dc:8e:e6:a6:cb:8d:21:0b:
0a:a2:3a:74:d8:39:fa:4a:75:28:06:ed:68:ea:d9:af:cc:31:
9b:8e:0a:7e:49:2b:94:16:ab:ca:3b:0e:51:9a:06:50:50:8a:
de:ff:55:89:8c:b8:c5:14:51:51:ce:aa:c0:ad:df:c3:d8:ea:
37:9d:82:c5:14:f0:14:ac:37:6a:c7:f6:0c:c4:29:62:17:25:
86:93:ad:bf:38:c7:c2:d2:0b:cd:73:6a:2f:47:19:0d:f7:1e:
ac:52:3c:0f:4f:f0:3a:0a:34:92:b8:86:da:32:37:37:2d:38:
b8:5e:5c:df:3a:21:ed:d3:7f:ea:89:d2:ba:be:5e:49:e7:ce:
42:a1:7f:a0:c1:45:e2:a9:c6:3f:fb:a9:87:6a:19:cf:68:b5:
a4:94:a2:0b:9e:46:73:e4:93:72:2b:ac:a7:bb:f1:b0:ab:42:
dd:2c:e8:4d:23:40:be:07:27:03:ed:e0:eb:5c:b1:e4:a8:4d:
ef:fb:21:2c:5b:e8:97:9c:ef:2a:20:27:1d:75:b3:0c:3b:e5:
05:4f:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:32 2025 by rpki-client