Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: Y4pPdLHCZ43s0G8Ufi6ngxEonkgFHmKxNKcsYZRMwlc=
Subject key identifier: 81:03:48:1C:A1:A3:72:8C:BB:85:AC:AF:8B:BF:B3:14:51:66:6B:84
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 019A50E3A3E0884AB7F7903C76987F62F1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:27 +0000
Manifest this update: Tue 04 Nov 2025 22:01:27 +0000
Manifest next update: Wed 05 Nov 2025 22:01:27 +0000
Files and hashes: 1: 8AgLpzaDL0h1dumVlt3QNUC0b8g.roa (hash: dFMCTzeLz+/t3jrKpnjSyGNljO948X6d0ELCXJMhuAE=)
2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: n1Q4XsPnGIl12wIU63u83bHuBajCPOFqtLrs5lAs/7A=)
4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a3:e0:88:4a:b7:f7:90:3c:76:98:7f:62:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Nov 4 22:01:27 2025 GMT
Not After : Nov 5 22:01:27 2025 GMT
Subject: CN=8103481ca1a3728cbb85acaf8bbfb31451666b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:1a:f1:48:80:9b:9c:87:5d:a1:11:30:59:
11:19:cf:98:6b:fb:66:59:6b:28:6d:54:cb:11:84:
8f:5d:b7:a7:fe:b6:d2:bb:7f:27:8d:9b:81:2b:83:
38:d1:5d:17:58:74:20:28:f4:dc:b1:1d:09:aa:24:
3c:6c:58:a2:9b:c0:bb:10:b9:ff:8d:29:0e:ae:2a:
c0:2e:b5:46:06:66:09:27:6a:92:ed:37:52:1f:09:
20:5d:db:68:d0:ad:f4:c3:a0:a4:00:60:5b:f5:3a:
e9:c8:0d:6d:d2:e8:10:af:2f:03:b3:67:9e:3e:e7:
2c:1a:6c:1f:c1:aa:5d:16:23:f0:61:ac:55:92:4a:
1f:09:e0:df:4e:f3:1d:3b:87:70:0a:89:3f:e4:75:
d3:a7:71:67:d2:2f:ae:fb:d1:dd:d9:3f:07:3c:38:
f1:62:03:41:9f:26:d9:9f:c1:9f:0e:a0:3f:dc:56:
0c:81:e6:26:21:51:68:b5:b7:02:58:44:18:61:ee:
60:e2:9d:59:82:df:b6:b0:12:1f:80:13:55:e1:58:
a0:f5:66:d6:54:7b:d9:b0:f6:3b:f8:b2:dc:14:08:
76:7c:f6:bc:5f:6e:6d:f8:ff:56:f7:03:06:0e:33:
e1:32:f3:3c:bb:c3:67:44:e3:b4:73:b2:21:da:1a:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:48:1C:A1:A3:72:8C:BB:85:AC:AF:8B:BF:B3:14:51:66:6B:84
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:03:13:c4:0a:03:2e:53:b6:fd:ef:31:86:bb:20:45:9c:32:
36:a8:42:12:d3:9d:2b:f1:0e:6f:de:51:22:b0:d1:0d:5d:9b:
da:18:c1:30:86:d6:86:4c:65:a9:d8:fc:84:e9:08:3e:80:f7:
e6:c2:68:ed:64:9e:af:cd:9b:47:2c:fa:0c:c6:61:c1:e8:31:
f5:6a:2f:5e:d1:0b:b5:89:28:b2:c8:72:98:1d:67:1d:c5:52:
7c:73:c0:74:c0:b0:cd:7a:c0:22:22:09:7d:cc:0d:ce:37:e2:
71:eb:db:a8:a5:d7:c2:7e:bf:00:0a:e9:42:c3:f8:9d:29:7a:
8a:d6:28:86:42:58:24:fe:bb:63:14:e5:16:79:b1:19:61:95:
4d:31:19:e6:fb:8a:be:46:c2:99:5f:a0:13:b9:2f:97:93:9c:
99:21:4d:d2:3f:65:29:6d:62:8e:dc:f0:cd:44:9a:b0:14:e1:
ee:0f:63:10:3c:19:4b:42:c1:c3:0b:a6:76:c9:3f:ad:02:f1:
e0:d8:42:6b:2e:99:e3:4a:91:13:f5:d0:a5:49:91:13:b8:a6:
5f:a4:af:a1:ee:65:87:6d:e3:aa:05:60:74:34:4f:62:0c:9c:
6f:96:b4:65:2a:be:9b:7d:d5:bc:a1:d7:9d:7e:98:c2:90:e2:
77:60:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:01 2025 by rpki-client