Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: //0LEzY4uIk1OEzdPf4RMShBTXbilkyr687f7B8FkxI=
Subject key identifier: 9E:DF:46:1F:6B:B3:3F:41:87:A2:C4:BF:C9:3A:FE:0D:1C:25:09:4A
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 019A52D13401815DAA398C5B8468474FC7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:00:33 +0000
Manifest this update: Wed 05 Nov 2025 07:00:33 +0000
Manifest next update: Thu 06 Nov 2025 07:00:33 +0000
Files and hashes: 1: 8AgLpzaDL0h1dumVlt3QNUC0b8g.roa (hash: dFMCTzeLz+/t3jrKpnjSyGNljO948X6d0ELCXJMhuAE=)
2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: 95+KXBosmG2jZ/lfzMNolFVBIq0cd3PmpcGqDYr1SJI=)
4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:34:01:81:5d:aa:39:8c:5b:84:68:47:4f:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Nov 5 07:00:33 2025 GMT
Not After : Nov 6 07:00:33 2025 GMT
Subject: CN=9edf461f6bb33f4187a2c4bfc93afe0d1c25094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:11:af:63:b9:a3:76:36:36:ca:64:06:19:
1f:a1:d7:2b:71:eb:22:5c:bc:61:fd:11:08:bd:a9:
d5:1d:8a:a6:7b:08:66:48:10:ef:58:87:18:d1:06:
f4:5e:cd:fa:ec:80:61:d2:4f:5d:e7:65:6c:ea:36:
c7:a6:91:cc:e7:60:1c:9d:1d:d1:6a:4c:ab:71:9c:
47:bd:0b:08:21:9f:86:7b:17:7e:c5:af:a9:2b:28:
4b:a2:9e:80:ee:9f:40:06:18:b5:90:c2:59:03:82:
42:d8:86:fe:ba:19:bb:44:d4:c0:e1:a0:ef:4f:38:
90:af:67:59:16:ac:9e:19:9f:03:af:e4:93:a2:da:
d9:65:3d:0f:52:4b:fa:13:77:be:34:07:3b:1a:1e:
27:9e:2e:b6:00:25:64:e6:64:9f:3a:13:bd:41:dc:
05:61:38:81:52:fe:a2:3d:a4:c3:d8:28:8c:e4:00:
d2:e7:e6:f3:87:86:80:81:05:3a:5e:a7:0c:aa:a5:
50:d3:08:9f:7b:60:73:2c:84:dc:41:b5:b0:23:9e:
7d:7e:7b:46:e3:3c:78:f1:74:58:95:f2:06:3f:4f:
25:33:55:cf:a0:80:58:3c:03:b1:32:71:03:9c:96:
d8:40:c5:b2:17:94:38:f5:19:b6:76:b8:48:98:b6:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:46:1F:6B:B3:3F:41:87:A2:C4:BF:C9:3A:FE:0D:1C:25:09:4A
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:22:b6:53:32:6a:ff:86:30:47:27:01:ae:30:bc:0a:ad:
ec:22:81:bb:4f:dd:1f:3b:a0:6a:62:aa:a1:ca:62:3d:b8:04:
d0:a6:de:5c:04:1a:8b:04:cd:4e:db:f5:86:00:3b:ea:a0:4f:
45:b3:3c:f2:f7:79:8e:d9:65:f8:fa:2a:11:a2:9e:95:0d:2e:
25:7c:01:4d:04:4e:f4:15:24:9e:11:cd:12:e3:71:47:2b:c2:
f0:87:ba:ca:22:f9:68:87:6f:15:c5:95:f0:28:da:99:0a:30:
fb:86:23:0f:95:3c:69:d1:96:d5:87:30:c8:a3:48:ad:e6:06:
fe:3d:3b:8c:78:38:fb:93:8d:f2:42:4f:29:36:5f:c8:5b:e8:
b6:fd:c3:52:4c:32:5d:b9:b1:77:a0:3d:46:ab:e8:5e:af:46:
b8:77:34:51:e1:b9:37:0d:7d:af:19:97:cc:e1:d5:1b:96:a6:
b7:57:23:2c:46:fb:12:90:28:77:d1:5d:ae:7a:4d:36:a1:97:
4e:fc:59:ab:be:c1:bc:e0:f1:68:a8:11:f3:fc:cc:cd:04:72:
d3:44:51:12:c0:c8:dd:db:42:04:86:4f:6e:10:5e:46:1d:e6:
d5:96:29:af:67:ce:b4:33:69:c0:8d:f3:f6:f3:79:f3:e4:1f:
d0:07:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:36:41 2025 by rpki-client