Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: q47J8X/eyF9d+gj5fQ86NaHJ/Pc1ugKdlFnXuZ0ol5s=
Subject key identifier: 5A:95:B3:50:89:9A:AD:17:85:03:B3:80:5E:0C:95:C0:56:1F:FC:CD
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 019A51F5A3FC1C3D34E32D73B1B5DCD75D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 0486
Signing time: Wed 05 Nov 2025 03:00:43 +0000
Manifest this update: Wed 05 Nov 2025 03:00:43 +0000
Manifest next update: Thu 06 Nov 2025 03:00:43 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: Xw+tCBXlaSu2tb4WZmNdkuNpzQeZRp78QC0oEqblJwY=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a3:fc:1c:3d:34:e3:2d:73:b1:b5:dc:d7:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Nov 5 03:00:43 2025 GMT
Not After : Nov 6 03:00:43 2025 GMT
Subject: CN=5a95b350899aad178503b3805e0c95c0561ffccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:9e:e6:57:d5:d0:32:5e:2f:39:3d:c5:ed:
0c:f4:a5:58:ee:99:18:83:5a:b6:28:7c:89:f6:c0:
b2:54:07:e0:b4:4a:ea:07:36:4c:73:65:5e:4c:5d:
90:ff:f7:7f:79:23:86:55:98:ce:bc:3e:67:58:14:
7b:0f:37:f3:82:93:1d:c1:af:b1:37:3a:78:13:9c:
11:9c:92:49:07:8f:7d:bb:b1:f1:9a:f4:c1:ae:12:
59:fe:f8:1f:9e:d7:5b:12:b7:3f:ac:5b:e8:b4:8b:
98:70:26:35:b7:c5:44:1b:cc:63:ee:dc:92:f4:3f:
fd:13:f3:12:cf:8f:da:1e:99:0e:c9:03:11:b0:5d:
0a:4d:6a:0f:db:d3:0d:91:75:95:bf:31:4b:8b:64:
8b:ed:45:8a:76:3a:40:4b:40:5a:10:23:fc:f0:e2:
39:24:62:c7:89:52:57:8c:30:fb:76:95:46:e7:8b:
fd:d9:97:2b:9c:6d:cd:81:40:66:b9:8e:cd:1d:7d:
87:1f:69:80:05:d4:e7:75:f5:bf:14:d8:ae:cc:d8:
f4:c0:e8:de:aa:0d:ce:e2:c0:25:88:99:38:0b:80:
ba:f7:a1:31:be:54:58:4d:c0:71:42:c4:01:1e:13:
95:77:08:67:ef:f5:b1:6d:5f:08:23:a9:19:eb:01:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:B3:50:89:9A:AD:17:85:03:B3:80:5E:0C:95:C0:56:1F:FC:CD
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:bd:9e:39:a9:b0:a2:5a:28:9b:c8:5f:35:9e:86:8b:c3:
c5:33:b1:22:1d:7b:02:a7:1a:6b:02:34:db:87:d0:6b:e7:e1:
d5:2a:5c:09:93:b3:70:af:16:12:ac:a9:4a:58:2b:89:41:50:
59:d6:40:5d:23:49:27:65:1d:e6:05:f2:20:7b:1b:d7:a4:81:
9e:ef:57:55:9b:19:44:03:3e:d7:c8:8f:26:89:26:b9:1d:01:
6b:9f:63:27:70:67:da:da:6c:af:48:db:b4:b2:15:26:44:3c:
a6:c7:07:22:f1:62:19:48:b7:18:66:a6:5f:af:04:7f:8d:3a:
16:be:19:aa:b2:69:30:f3:f6:fa:5b:d2:51:c5:e5:05:b3:52:
8f:d1:2f:83:87:d2:65:1f:da:97:5e:17:40:57:20:63:d6:e9:
b1:6d:ed:84:88:6c:51:29:b9:ad:03:78:7c:a3:8a:fe:d8:26:
1e:6d:48:0e:bb:df:51:8b:49:9f:79:c2:09:64:67:2e:f7:92:
fa:72:d3:aa:1e:96:4f:fc:c4:68:42:b0:c1:af:c7:94:29:a8:
2e:8a:78:20:e0:11:18:86:4f:7a:01:8c:35:0d:96:ab:a7:63:
f7:6a:f4:ed:aa:ad:4d:51:0d:e2:0c:02:50:bb:54:2f:c1:b7:
93:46:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:54 2025 by rpki-client