Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File: fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier: drHNkSITIgWkSkOfo7h7o/SjoUYpDsXg+SpD5vxNlyA=
Subject key identifier: 46:02:C1:33:98:59:C1:31:70:77:2E:5B:C1:CF:92:01:BB:27:FC:AE
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 019A4DAB2CA60CA9CFAD32D7700128798CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number: 1148
Signing time: Tue 04 Nov 2025 07:00:54 +0000
Manifest this update: Tue 04 Nov 2025 07:00:54 +0000
Manifest next update: Wed 05 Nov 2025 07:00:54 +0000
Files and hashes: 1: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=)
2: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=)
3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: CxHOzNPyrBnftVQNVW0UG49f5qQwd8kB0DZZ73BwAOQ=)
4: lEhVQNOMvqw54edqH7zh3c7mW1U.roa (hash: nQoP405LztBAkFL0e8Rma4sgogpaQEPhwJTWJogq2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2c:a6:0c:a9:cf:ad:32:d7:70:01:28:79:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Nov 4 07:00:54 2025 GMT
Not After : Nov 5 07:00:54 2025 GMT
Subject: CN=4602c1339859c13170772e5bc1cf9201bb27fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:f5:14:16:30:48:e2:62:35:ab:7d:cf:cf:
41:e0:80:10:81:08:23:82:79:04:a7:04:d3:a5:0d:
5f:b5:fb:3b:20:1f:07:b9:4f:31:17:89:90:e9:1b:
78:94:7b:10:37:43:dc:db:d2:e2:b6:29:a6:4f:af:
bd:34:03:1b:67:d6:79:5b:2a:3b:a8:20:27:2a:a7:
b3:b3:83:88:3a:49:3c:17:0e:09:3e:76:01:79:de:
34:1e:b9:0c:b9:37:f3:f8:ed:eb:45:4c:ac:68:25:
e8:f8:19:49:6a:17:e0:09:ef:dd:01:2c:72:7b:f3:
a9:7c:10:cf:11:0b:91:8c:1b:dd:1a:8f:06:15:dc:
57:fd:f7:51:f2:12:3b:f2:9f:66:b4:81:d1:96:5f:
e6:9a:55:49:72:27:61:6b:15:61:ad:8f:f7:1f:ed:
42:1e:1b:73:cf:f1:b4:27:fc:ee:c7:26:83:90:71:
7a:dc:d2:e9:4f:71:04:ee:83:8e:2d:e1:62:f0:29:
d6:21:42:ae:ef:8d:33:11:e4:a6:e5:59:e7:52:9f:
f5:5c:4a:b6:74:e2:53:ac:a9:d1:6f:ea:d9:fa:7a:
56:81:a7:1a:6d:f2:88:b3:6d:fe:bb:33:01:3b:31:
d8:3c:60:8f:6a:4a:91:08:69:64:95:0f:6a:0a:26:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:C1:33:98:59:C1:31:70:77:2E:5B:C1:CF:92:01:BB:27:FC:AE
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:06:f9:36:d7:e8:7b:5f:a8:db:b7:b5:21:02:98:d3:9e:
6f:9e:87:1e:fc:65:65:6c:bb:ae:5b:a4:df:db:cf:62:8c:c3:
9e:c8:91:34:d9:5a:56:f8:2f:2c:8e:0c:46:c1:9c:18:0c:96:
0e:00:93:53:f2:31:72:5e:c3:f2:be:d5:69:86:da:37:57:ab:
9e:18:01:e6:11:6c:c6:e0:5b:f4:49:0e:6c:b9:38:88:dc:d6:
8b:b9:1d:39:00:94:95:ec:69:ce:4b:12:e9:b9:e1:e9:27:03:
b9:73:25:0e:44:fa:ae:dc:62:05:83:00:f4:40:55:ff:3e:63:
c6:09:4f:9c:17:73:a6:0b:af:c0:1b:77:f6:f5:6b:92:f8:e6:
c1:1e:39:df:41:e8:f2:67:94:0a:64:bd:1a:8e:8f:0b:b4:81:
09:2d:9f:22:e0:05:9c:6b:85:76:7d:1e:5d:33:55:9b:1c:dc:
5f:1d:bd:8a:0e:a2:4a:ce:ea:38:d6:f9:c4:5d:c2:9f:0c:ea:
cc:13:e8:08:4e:75:14:04:15:40:9a:9b:01:39:03:a5:bf:92:
3c:87:f8:f6:47:2e:55:18:6f:b6:3f:d1:ab:eb:15:18:2e:74:
ef:91:05:ae:c9:70:22:6e:37:a7:da:e2:37:f5:b6:08:05:18:
94:01:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:08 2025 by rpki-client