Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: WSjaWRwTYacr8LmvRPC/w+DTGl7AWo8x76TfhUSwqu8=
Subject key identifier: FE:60:58:1C:EB:3A:B3:E0:3F:9A:D9:11:D8:A1:88:F3:98:AD:93:53
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019A4D3CF9449AE05FA0212D695B47E01DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 13F3
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: UzG8W/19LFkL2IApnu3XL5zyye/qJ6/TJzy1xHX9ySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f9:44:9a:e0:5f:a0:21:2d:69:5b:47:e0:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=fe60581ceb3ab3e03f9ad911d8a188f398ad9353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:ff:c9:9c:40:98:d1:80:54:6a:24:2f:b5:
3a:2f:8a:54:0a:2a:fd:26:d3:f0:a3:1d:a7:50:17:
78:43:d7:03:cc:79:33:79:00:b9:d4:c7:46:3b:19:
c1:ae:55:be:1b:f6:7b:20:cc:42:4b:e5:79:8b:ba:
8e:59:a5:bd:94:6a:f5:6e:c2:87:13:34:66:5b:32:
5c:80:04:d5:f5:3e:d0:26:1c:df:92:98:98:5d:7d:
bf:5f:04:13:4c:40:4d:b9:95:42:2b:c1:1a:40:68:
62:18:cc:f3:04:8b:a5:74:08:e6:68:81:55:d2:4b:
f8:b7:44:a6:25:25:79:f9:f3:a5:99:81:a6:7c:08:
dd:80:42:44:35:33:89:45:2b:ca:3e:c2:98:b8:06:
be:7b:54:4d:0a:fe:46:6c:f3:e7:d4:0d:0b:6d:59:
f6:3b:43:4d:8f:af:38:a4:ac:65:6f:30:c4:c5:76:
cf:6c:bc:ea:85:65:13:eb:ff:bc:10:b7:b2:d3:63:
81:f3:19:b6:90:36:67:82:94:7d:a3:b6:1b:18:43:
0d:17:18:d1:bf:db:d3:d5:d4:b3:a4:46:eb:3c:4a:
8c:42:97:85:07:cc:84:0a:28:75:8c:3b:63:8e:69:
c9:47:d8:0e:cc:5f:74:c5:dd:2d:39:3f:80:92:1a:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:58:1C:EB:3A:B3:E0:3F:9A:D9:11:D8:A1:88:F3:98:AD:93:53
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:48:c6:d9:0c:77:7a:6a:f6:9f:62:f2:94:7c:b3:9c:52:
b1:e0:98:98:97:6c:3c:d7:53:04:bc:0b:00:e6:61:23:e8:29:
e2:83:07:15:9a:d0:ac:fc:a4:e9:52:02:7d:82:c9:25:38:13:
89:f4:71:8d:7d:1b:0f:47:75:09:ff:07:25:19:2d:9a:0f:ad:
3c:59:5a:c0:1c:80:6e:76:1e:80:64:e7:d8:58:43:01:95:a5:
a0:32:1e:cd:00:37:b0:33:c2:33:0f:fe:9e:27:ff:cc:a6:27:
a6:91:eb:4f:1c:99:97:25:76:f9:cb:4d:3b:5b:7f:e0:cc:0c:
09:b8:8a:e2:14:7f:39:21:bb:30:5d:32:06:74:d0:26:31:cf:
39:c3:f8:3f:fc:68:2c:67:69:0a:4d:d8:2e:db:75:bf:68:97:
78:ad:c4:0b:4e:1b:4f:fc:7c:e3:71:86:b5:fc:e8:aa:63:fd:
36:2c:32:36:7c:51:4a:c2:59:25:f3:2c:51:1b:c7:de:ab:f1:
68:06:0d:5b:e9:f3:70:4b:56:f1:cf:34:8c:16:67:24:66:87:
6b:4a:65:dc:64:6f:f0:75:bc:33:f9:e7:ad:dc:70:31:9f:2b:
4b:85:cd:d9:b8:89:de:9b:e8:2e:6a:92:1c:27:f1:02:c6:49:
44:3d:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client