Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File: F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier: c4HtMCx9xr6OYxLMlJXZ8ZhXc2fMbm+ujo6Vj/SqDwo=
Subject key identifier: 8E:93:47:66:30:D1:6D:B2:2C:30:70:97:80:3C:6A:46:61:3D:07:D1
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer: /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial: 019A4E866B332FFAC79BC66DF30D81B05ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number: 1142
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: al+r38BJaXLY67IFJpBjLEcvOhaeqfvsl+mGXj56atI=)
2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6b:33:2f:fa:c7:9b:c6:6d:f3:0d:81:b0:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=8e93476630d16db22c307097803c6a46613d07d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:e7:38:5a:b4:eb:73:e8:20:0c:69:fe:e3:
93:48:27:e6:26:47:7e:25:35:62:0f:da:e6:ed:4e:
d6:07:cb:f3:d8:a7:b1:10:6c:cf:4e:c4:33:4a:73:
38:c1:d2:a9:f7:ec:5b:da:1e:3e:02:78:b4:c4:89:
af:46:9d:e2:dd:e0:26:cf:94:77:5d:dc:88:8c:1a:
e4:c5:23:64:5d:d4:1d:5d:95:2e:c9:71:1d:3c:2f:
1d:8e:d0:aa:69:0a:b4:f9:c4:11:29:fc:56:15:bb:
b1:2b:55:49:c2:00:75:5c:a4:31:00:2a:2a:a7:64:
2a:e9:55:f3:3d:54:08:8c:e6:69:a9:74:25:92:40:
1c:b8:9e:9c:27:4b:ea:93:7b:9e:41:a0:0a:6d:ce:
03:ae:2a:25:93:53:79:92:8a:a3:b4:f2:f1:0c:dc:
32:fe:9e:ba:f9:ae:6b:09:55:ca:d9:2e:15:16:9e:
be:35:42:59:f0:1e:5a:e3:34:18:dd:97:6e:b5:92:
32:eb:45:0f:fd:e9:1a:b8:fb:62:5b:52:5b:55:dd:
70:b6:8d:c8:00:27:02:f7:b0:37:19:8c:30:0f:f6:
19:74:74:bd:71:0b:b0:13:b7:78:f6:d8:7a:df:d1:
5b:9f:39:2d:02:eb:85:fc:26:ab:80:32:f5:2a:01:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:47:66:30:D1:6D:B2:2C:30:70:97:80:3C:6A:46:61:3D:07:D1
X509v3 Authority Key Identifier:
keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:a5:c7:6f:12:73:e1:9a:8f:68:d6:03:23:89:76:76:59:
eb:2b:43:52:fa:e4:01:4a:c3:f3:b5:c8:ea:e1:6a:93:30:6e:
4e:b9:b6:c2:c7:3d:22:d5:d5:1d:cb:bc:34:44:d0:c3:a6:c5:
c9:2f:bf:fa:b5:f9:b3:ea:8f:72:3e:1a:15:d1:80:f0:73:a4:
38:37:40:18:d9:13:af:a1:ff:a9:d8:c6:60:94:31:d0:17:a0:
06:83:64:fb:34:05:4f:89:49:a8:6c:b0:20:bb:06:68:c4:0d:
8b:42:38:f5:76:0b:2a:7b:a5:be:7b:a4:87:84:19:0a:2b:4e:
c8:61:fd:b6:6a:df:64:2c:fe:1c:63:ad:3d:ea:90:bc:64:f5:
1e:fb:f1:79:78:64:5b:0b:42:dd:cf:9f:e3:28:01:6a:ae:87:
e4:69:89:a8:f9:b2:70:42:f3:46:f8:1a:37:5b:23:45:9f:16:
a7:34:f6:99:d6:46:2b:5f:db:43:5d:b7:e2:0d:3e:ea:9a:0b:
91:3c:ca:95:60:bd:34:2d:2f:5d:13:34:fd:29:ca:f6:b0:51:
e7:84:ab:59:ae:0f:5c:6e:8b:ad:14:36:f3:03:41:67:1f:cf:
76:7f:22:2f:b2:7a:30:42:dc:5b:5b:d8:1e:76:1a:59:aa:33:
5d:f6:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:21 2025 by rpki-client