Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: uD0TXO2jAnmbhRHmDgFo4W3w7xRyDuV9Ga8sTnbkjJI=
Subject key identifier: F5:20:E6:6C:25:D2:33:C8:64:4C:91:BB:3A:A5:54:F8:CF:3D:04:97
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019A5119EA38C342F8007DC2A8FAE6549A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: RJyYN2Cym5F2OtcnQ3Jv51y7/Qbo4DvoNstChzuOmc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ea:38:c3:42:f8:00:7d:c2:a8:fa:e6:54:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=f520e66c25d233c8644c91bb3aa554f8cf3d0497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:3c:0e:92:76:45:68:1c:97:56:c7:12:5f:
13:84:6c:28:fd:3b:03:c4:44:45:60:3e:0f:d4:fb:
1c:b6:ae:4e:fb:4c:bc:df:b2:85:30:81:fa:33:60:
97:f6:12:d7:de:d5:74:38:ec:7c:34:90:7a:3a:2b:
88:a8:ac:f0:68:c3:16:44:bb:40:d0:2e:f9:e5:60:
07:9e:14:63:a2:ac:71:ab:d3:42:19:d8:8b:10:8d:
3b:a9:79:05:9a:15:f1:5f:e9:88:22:6a:82:84:83:
b3:bd:29:f6:f4:6e:05:73:6e:b0:c2:7b:1c:5f:a3:
13:e3:ea:79:ca:85:d1:22:03:7c:d0:d9:fa:8c:48:
2f:62:03:18:28:26:c2:43:7e:f7:55:b2:95:53:53:
2e:15:8c:0c:5d:c8:19:c4:4f:e5:cf:ea:46:1e:3f:
a0:71:18:16:b7:83:40:d5:6c:5e:c9:51:3a:1b:89:
35:72:05:a1:99:42:cc:34:9e:2a:c4:5e:a6:9c:2c:
29:ca:e8:ed:45:4d:7b:62:2c:a3:dd:0c:1c:10:bc:
4e:0c:2f:f1:c8:e0:69:35:0b:ff:c6:ef:72:b4:76:
3b:56:71:b6:5f:69:96:03:e6:fa:d0:a5:91:8b:27:
b4:fe:d8:14:06:1c:8d:a0:00:44:41:d8:2e:c2:fe:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:E6:6C:25:D2:33:C8:64:4C:91:BB:3A:A5:54:F8:CF:3D:04:97
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:04:7f:04:62:2e:59:9d:27:eb:e4:b6:8c:28:37:30:c3:69:
4a:00:d4:6e:3d:f6:c6:d5:eb:1e:3e:8c:6f:4d:7b:42:e9:f9:
41:bd:dc:70:e8:61:65:22:e3:14:38:45:25:6b:fa:d8:36:55:
f6:d6:16:78:72:8f:3a:1d:06:ff:9b:35:5b:78:ef:cd:94:51:
c5:52:5a:c9:40:ae:b1:a0:37:7f:9a:a3:a0:db:c3:45:fb:bc:
0e:ce:ed:48:fc:d0:f0:33:28:7f:ad:6a:51:df:f2:14:34:d4:
51:99:9b:1b:2e:23:84:43:1a:27:20:79:91:c9:0e:ea:86:e9:
10:70:02:d9:eb:67:0e:6c:cb:82:f9:b1:ad:1a:fc:ec:4b:75:
88:fe:2a:2e:da:50:2d:fc:d1:71:37:0a:c6:5e:ae:2f:72:cb:
65:d3:78:3a:8e:06:2a:b8:87:cc:52:fa:ca:e5:69:8e:ab:3a:
d0:4d:eb:44:6c:b0:c8:6f:9b:7f:fa:03:db:f1:95:a7:12:73:
81:2b:86:8e:e6:e7:f0:29:2e:6b:87:7a:47:a7:fc:43:b8:42:
12:cf:30:12:16:40:2f:b5:bb:20:de:fe:be:28:e6:60:46:f1:
42:3b:31:cc:5e:1a:23:43:19:bd:a5:20:c7:5d:08:fd:9b:2a:
ba:87:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:53 2025 by rpki-client