Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: 0BNYdHmQpoXVrYfQ/ru9h2iMJ2fRhX9JFT79K7CBiY8=
Subject key identifier: AD:A2:40:D5:F0:1D:46:78:04:74:BE:26:4B:33:B8:31:2F:62:B1:A9
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019A4EF57616C039F92F0363C90947CFB516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: Qcc6hWqO3926rHCqWvBYag2NsNN4TBl1x9SBYoJN9LM=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:76:16:c0:39:f9:2f:03:63:c9:09:47:cf:b5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=ada240d5f01d46780474be264b33b8312f62b1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:19:0b:0d:57:26:7a:67:55:fd:e6:7b:aa:
a2:65:a8:e1:52:c3:fd:9d:02:87:07:3b:e6:2e:40:
46:4f:87:6b:56:1b:e9:98:2a:ff:69:08:67:a7:e3:
47:28:46:1c:dc:a0:4b:2b:53:33:6a:a9:40:a0:d6:
c3:03:de:82:6d:b6:03:a1:d6:92:6e:7a:c8:75:56:
3f:5f:d3:39:52:6f:e2:37:8e:ff:d8:c4:f5:8e:9b:
18:a8:d5:8a:7a:3a:8c:7d:0a:37:05:34:e5:39:ba:
8e:60:b3:57:01:f3:80:25:29:ff:52:8f:4e:8b:5a:
0c:a3:65:f0:9f:72:6e:4d:b2:05:0f:a8:83:44:70:
11:1d:dc:b6:67:75:72:5c:2d:2b:9d:db:50:3d:80:
17:d2:5c:89:f4:30:21:c0:93:fb:fd:34:f9:2b:5b:
60:d3:a9:a0:46:3e:e1:d7:c5:3a:ca:1b:71:f3:e9:
2c:4e:a0:9f:a2:d4:c6:4a:77:6b:b3:5c:aa:06:08:
3e:41:3f:54:89:e6:32:84:09:31:71:8c:8f:c9:c0:
4f:31:63:35:e7:f2:1c:4f:eb:f9:6e:8b:ba:c7:ec:
91:4e:8b:0f:46:16:f3:08:bd:0d:4e:66:66:c7:6f:
7f:f6:a4:fd:c0:85:3a:91:7c:df:cb:74:77:4a:ef:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:40:D5:F0:1D:46:78:04:74:BE:26:4B:33:B8:31:2F:62:B1:A9
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:c1:96:00:1f:a6:bc:2e:62:95:27:d9:b4:1e:11:f3:5d:
cf:39:09:05:d1:22:4f:58:19:06:1f:cf:fc:91:ac:26:89:0e:
7d:cd:67:0c:cd:af:c5:00:ad:d5:ff:00:21:ab:a3:34:b1:31:
7e:86:af:bc:c4:1c:bc:f9:e4:b7:0d:f2:d3:ce:95:73:1f:e7:
5b:d0:aa:5f:e0:e1:90:01:a7:b6:b6:8b:c1:97:7a:6a:a3:a1:
4f:a0:5d:5a:52:76:9c:02:b9:1f:97:eb:73:12:98:47:65:b4:
cb:5d:7f:03:1e:26:df:ac:62:c9:ef:de:6d:02:42:28:f3:8e:
98:1a:3f:6a:a8:6c:aa:c7:89:81:e9:e7:55:a3:30:de:97:f2:
13:d1:9f:c1:c8:c7:4e:7a:89:3c:9d:51:f0:ee:39:df:42:c1:
95:c0:30:d9:88:9b:cb:3b:ae:ae:ac:bd:8f:19:a1:51:e8:94:
55:75:d5:00:26:d3:7f:a0:95:18:2f:3d:81:2a:3d:ef:4e:98:
75:f8:cc:3b:6b:5a:10:c6:06:36:dc:87:92:87:42:65:08:58:
30:18:20:f4:c9:e1:89:df:c5:4a:50:79:97:35:53:b3:12:55:
e0:84:2f:d1:5e:14:12:2b:38:13:f2:12:7b:df:38:ee:ee:ef:
07:83:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:54 2025 by rpki-client