Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: 1ctdwL/Uljh0ltpat8Dq8mnfI0SSh7rdK9/4m5Rwgwk=
Subject key identifier: BD:B7:C4:86:9E:F9:A0:3B:28:CF:01:E1:69:4B:2A:87:4D:20:A4:D3
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019A4F626D7A90C569CA4689FEFA451EEF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 1722
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: HVuVVEPwr+gnenx2OzooIepDMvfj1vStx//KaUj/+zI=)
5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6d:7a:90:c5:69:ca:46:89:fe:fa:45:1e:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=bdb7c4869ef9a03b28cf01e1694b2a874d20a4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:ff:9e:13:f5:ec:65:ec:4e:74:bc:f8:77:
63:ad:b9:cf:bf:8f:42:34:b5:d2:42:4d:8b:9c:f8:
60:b2:57:89:26:b2:91:6f:dc:7b:ce:bc:59:09:a9:
e1:c6:72:7e:55:7f:ee:7a:31:ab:0a:b8:12:5e:40:
4b:8d:e2:54:17:8c:7e:53:ad:e3:c8:15:13:3e:8a:
89:a2:c1:82:02:6f:9f:5b:ed:a3:10:5e:85:86:be:
27:77:28:40:b4:97:de:aa:dd:a6:a9:20:e8:3d:95:
49:5a:11:30:69:e9:94:78:2f:fe:53:c6:5a:61:1e:
59:83:4b:59:f1:61:e1:6d:89:3f:7f:12:1d:81:c8:
90:99:c9:dc:0a:c8:4f:8e:79:29:9b:33:5d:d3:b2:
47:ad:c9:c1:0b:d1:82:d6:c6:98:55:e0:3c:6c:61:
db:2f:4b:f7:dc:65:58:cc:1e:7f:2b:d8:8d:6d:ed:
40:9c:ed:89:c9:c3:0e:b7:9c:14:7e:5e:be:83:e6:
5c:e0:e6:dc:53:c5:02:ca:a2:ca:fe:6e:94:85:27:
49:2d:b2:42:64:de:62:39:2a:98:97:93:2a:54:c9:
6d:82:f9:78:bb:f6:af:d7:9b:9c:c4:94:99:da:2e:
7d:9c:b7:2e:50:28:b2:b1:8f:b5:32:34:2c:87:a0:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:C4:86:9E:F9:A0:3B:28:CF:01:E1:69:4B:2A:87:4D:20:A4:D3
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:72:4d:ea:f8:17:3d:1a:5c:98:e3:e8:cb:c9:c2:7d:c8:
01:85:ef:46:56:36:f7:1a:f6:d9:87:48:d0:ad:f7:83:1e:5e:
ea:9e:ca:17:71:c0:21:c5:c8:2c:76:7e:17:31:e0:d0:57:d7:
f3:1a:e1:6d:f6:44:a1:f0:09:d9:ab:de:23:5b:ca:bd:22:06:
28:ef:73:c4:8b:c3:33:79:83:cc:4d:cb:7a:3a:c6:56:9f:96:
7f:4b:66:0d:81:8d:7c:26:96:a3:d0:f4:c0:cc:f6:39:88:34:
a8:be:0e:b0:13:97:bc:b8:a0:39:c6:49:16:b0:92:2a:cb:37:
22:ef:9e:13:6b:9a:ee:1b:c2:40:99:3e:c4:30:f1:82:e6:e6:
a0:ac:3b:0b:32:23:dc:f6:41:12:c0:a0:36:3a:93:e2:c2:65:
85:7b:a6:31:c3:a0:fa:02:88:ab:cf:b5:f8:6a:c5:3e:36:d6:
2a:f9:ed:ee:43:6d:e8:a0:4f:32:0b:0c:b5:7e:6d:be:75:c0:
ac:f0:5f:1f:e7:d3:99:08:b7:78:e7:80:cd:cf:8c:88:a3:d7:
ef:dd:61:6f:ad:60:fd:6e:83:58:52:68:98:76:9e:fc:23:ee:
7b:49:90:7c:27:d9:58:ef:cf:b8:38:02:55:7e:01:8e:ca:0e:
f8:7c:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:12:38 2025 by rpki-client