Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier: 3lQ2yICbtq1kQXc/dvGWNmGPe1Y257ci8Sv/goLf0QQ=
Subject key identifier: 07:38:E7:A3:39:8A:C6:C6:FD:42:D6:5D:0B:98:7C:A1:09:9E:95:8A
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 019A4D3CE1A9DA78728720D40032ED4016AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number: 1319
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: zYaNuATFUvdCpw80J5jpgTtIhOzXZkxKPSfJcGMNIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e1:a9:da:78:72:87:20:d4:00:32:ed:40:16:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=0738e7a3398ac6c6fd42d65d0b987ca1099e958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:86:23:47:0f:91:84:a1:97:fb:9b:59:31:
ae:5f:1c:e2:2f:51:3c:79:0f:de:4a:49:da:e6:bd:
53:2b:d2:2d:ac:2e:37:68:84:43:3c:81:a3:3d:ff:
ca:7b:76:1d:19:92:61:4b:00:d8:1a:b2:30:c2:37:
b8:fe:a6:e7:ba:b2:9f:be:20:25:5e:b1:cd:33:f4:
cd:bc:54:30:87:7e:17:9a:f4:4c:0f:00:37:19:7b:
11:28:37:aa:ff:0d:51:a7:4d:0d:71:cc:72:6f:1f:
2a:23:71:ab:4d:17:97:68:1d:fc:01:f2:2a:40:a2:
29:68:21:1e:6c:16:5d:89:c2:b4:b2:5f:f4:e8:61:
b6:3e:40:a5:df:d7:98:21:10:35:fe:fd:c2:87:03:
e8:a9:fb:e5:ca:60:13:77:83:35:61:b9:e6:a6:92:
f5:d9:f0:72:31:54:7a:01:93:57:5b:8b:8e:b3:5d:
3c:17:60:e8:e6:8f:05:be:05:f2:76:2f:79:2d:42:
52:8e:f2:42:64:ad:42:d2:23:2e:c7:a8:b1:8f:37:
55:24:54:e0:fe:1f:d1:bd:c3:55:68:de:00:c0:23:
0b:8a:18:7b:8e:d7:51:f7:1b:ae:14:14:2f:aa:e3:
a0:b3:55:7e:dd:e4:39:f0:c0:18:d9:aa:c0:c2:e8:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:E7:A3:39:8A:C6:C6:FD:42:D6:5D:0B:98:7C:A1:09:9E:95:8A
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5a:d3:82:7b:08:3b:af:b9:0b:7f:c3:10:cc:d9:22:65:a6:
b6:24:18:24:00:28:2c:0d:5b:63:2c:2a:69:ba:89:8d:38:3f:
b4:50:5e:54:cb:26:45:e7:f1:04:b1:0a:14:76:a6:8a:78:8a:
15:cc:13:ad:9a:74:cb:6e:51:1e:f2:1f:13:34:34:cf:ee:af:
bc:29:63:05:55:9e:40:61:f4:82:ea:11:30:f1:2f:4d:fa:9f:
6a:90:0b:54:09:81:3c:84:b4:de:80:a3:0f:1e:77:38:2f:ad:
fc:95:a5:11:fe:a7:80:c0:3f:9a:62:99:e0:a7:1c:de:44:a1:
2d:2f:18:46:98:e1:f0:3a:5c:ab:31:f5:ae:86:bf:02:7c:69:
53:57:23:24:a7:2b:05:da:b8:bb:9f:a9:09:8d:2b:cd:5a:91:
2d:9f:ed:6a:03:dc:7b:80:46:a9:8c:43:a7:52:18:14:a7:8a:
46:06:20:46:00:2c:c4:5a:44:e1:f8:a2:88:a8:20:09:ac:fb:
61:ac:73:49:e2:38:96:08:c8:32:4f:c1:26:39:bd:4d:b5:af:
b3:f2:b5:27:ee:c7:77:be:9e:78:7e:46:b3:6a:ac:6d:0e:11:
8b:dc:49:bd:3b:77:44:3c:f9:1f:7b:26:eb:14:0f:31:6c:fb:
ce:4c:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:27 2025 by rpki-client