Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File: fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier: mftUotxTrvQx+Zsa7Ht52ysHCSeVkPrYmt3VL+9xmBE=
Subject key identifier: 2E:5B:4A:DF:53:8B:DC:81:B6:2C:78:23:BA:F6:33:3C:2F:63:46:18
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial: 019A52D1251A735E6E62D9BC20944A66991B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:00:29 +0000
Manifest this update: Wed 05 Nov 2025 07:00:29 +0000
Manifest next update: Thu 06 Nov 2025 07:00:29 +0000
Files and hashes: 1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=)
2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: 0J/FXvr9yk0m5G2umsiJ5Lfwn5Xdb/RnvYkDnEbM3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:25:1a:73:5e:6e:62:d9:bc:20:94:4a:66:99:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Validity
Not Before: Nov 5 07:00:29 2025 GMT
Not After : Nov 6 07:00:29 2025 GMT
Subject: CN=2e5b4adf538bdc81b62c7823baf6333c2f634618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:ad:3b:48:f8:bc:90:51:35:01:03:0f:2a:
7d:d7:30:41:e6:cd:62:ad:7d:c7:95:3b:0b:dc:f5:
40:ca:5c:21:1a:74:ab:06:55:74:c4:24:ab:1f:31:
1a:e3:6e:67:b1:0a:f3:88:f8:b4:92:b1:62:bf:a6:
40:61:40:a7:ef:ad:a4:69:2b:d1:aa:ec:02:d6:5a:
0c:96:8f:05:81:6d:0c:8f:23:2a:2f:4d:e3:6a:a5:
02:9d:af:67:b5:6e:a3:71:75:e5:86:25:b7:71:20:
b4:bb:ba:87:5c:a0:0b:f8:b2:86:56:d0:40:9a:58:
0f:44:4c:f3:1c:62:b1:e1:94:b5:bb:82:c3:04:10:
a3:9c:2d:5c:83:1d:3d:6c:8f:61:0f:53:db:0f:17:
bb:17:42:8e:a4:db:eb:be:1e:a5:09:16:7b:be:26:
d4:9e:68:22:34:9d:66:f7:a2:59:22:2d:c0:1d:55:
9a:0f:56:0e:e2:0c:63:de:f8:45:5d:1d:64:a6:9f:
5e:92:c1:d7:7b:18:74:19:ef:ed:d7:f3:ac:90:b0:
6c:3a:86:21:0a:f3:5a:86:92:93:fb:65:57:c1:27:
4b:98:b6:38:44:de:3d:34:10:9b:49:df:7f:12:c1:
6c:c5:87:a9:1f:6d:f5:79:24:c9:e3:a2:00:39:ea:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:4A:DF:53:8B:DC:81:B6:2C:78:23:BA:F6:33:3C:2F:63:46:18
X509v3 Authority Key Identifier:
keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:50:51:da:06:e0:5a:02:ea:c6:9d:a2:bb:fb:e0:94:de:
25:ec:b3:7a:12:fc:5c:6a:8b:49:67:7b:49:c8:d8:24:ce:a6:
cd:13:3d:68:5e:e6:24:6f:6a:57:b3:17:fc:51:05:c2:52:d0:
9e:a2:c6:f1:73:ff:a7:86:2c:1c:8b:1e:71:1b:56:59:69:9a:
dc:29:cf:fe:b1:a7:66:74:c2:f4:20:4b:d2:91:4c:e6:0a:46:
d8:ce:d8:3c:a1:d9:c5:0c:f2:d7:0a:c6:e8:88:2e:8a:93:bd:
67:bb:75:a0:da:b6:88:7e:61:99:db:68:1a:51:6b:d9:30:da:
57:98:e7:49:80:48:59:63:84:16:9a:5e:23:8f:76:50:4a:66:
5d:ab:cf:3e:45:35:dc:77:c4:68:a5:2d:d0:8d:09:83:a5:c4:
c1:8b:19:cf:a5:14:55:29:72:57:2f:f8:99:38:bf:b3:39:2c:
9a:38:07:66:69:d6:6e:44:c9:a4:33:70:95:be:81:73:a8:67:
3f:ea:5c:b1:c4:45:03:36:25:78:01:ca:cf:2b:18:19:07:c7:
db:45:93:98:84:c2:b4:f1:08:77:36:76:bc:26:20:24:a0:d6:
fd:ff:5c:f7:3e:14:74:50:06:ba:43:9b:9d:d3:32:e4:6b:82:
34:ff:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:59 2025 by rpki-client