Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: EOGV3PFaqF9KpJIL57ZS2U8X4dIbuU0jSGx23lBlAt4=
Subject key identifier: B2:B0:CC:3F:07:7B:D2:79:BD:7E:6C:CE:66:50:B7:E3:16:05:4E:8F
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019A51F58197EB721AB2A4D1375C1FFDCE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 01FE
Signing time: Wed 05 Nov 2025 03:00:35 +0000
Manifest this update: Wed 05 Nov 2025 03:00:35 +0000
Manifest next update: Thu 06 Nov 2025 03:00:35 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: opeBSRwY7psPICbMORie632osL9IlGNk2rcCnKnobTY=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:81:97:eb:72:1a:b2:a4:d1:37:5c:1f:fd:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Nov 5 03:00:35 2025 GMT
Not After : Nov 6 03:00:35 2025 GMT
Subject: CN=b2b0cc3f077bd279bd7e6cce6650b7e316054e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:a0:f8:ac:b4:dd:f4:41:0f:56:00:5c:e2:
93:0e:01:fc:45:1d:bc:3d:5d:ab:b4:f4:88:b8:b0:
6b:c6:c5:99:0e:fd:13:c0:a6:0a:1f:65:b6:71:a1:
66:55:f4:51:b1:34:c7:ef:36:6b:d4:8e:7b:d6:ee:
f0:32:d1:58:f1:c7:e9:ce:b2:f1:2d:98:fb:1c:16:
34:04:01:59:91:98:85:ce:72:35:f3:ae:d6:3d:a6:
29:f7:a0:cf:24:8d:80:88:f0:72:06:35:63:2a:a4:
50:14:2b:3c:34:e3:34:e5:c9:08:6f:6d:3d:3e:02:
5c:44:dc:ca:fc:0a:3b:4e:6e:53:93:4d:2a:73:40:
ee:6f:d5:b6:54:9d:81:dc:9e:ef:d0:f2:96:db:21:
f7:de:a0:96:08:7f:75:eb:06:9f:22:c3:e2:64:53:
94:8d:fb:95:64:fb:12:5b:33:5c:c7:01:70:f4:05:
ed:3d:e3:f2:37:69:33:e4:28:5b:74:c5:19:24:93:
ce:e9:41:32:a3:c3:26:91:a3:66:5a:b1:89:20:7a:
e1:4d:b2:9e:dd:db:05:53:65:eb:dd:02:75:57:e6:
8f:b3:cd:de:5a:c7:0a:6d:26:a8:dc:b7:41:8d:1e:
04:d5:93:66:97:aa:3d:06:7e:3d:4f:d4:2e:ca:0a:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:CC:3F:07:7B:D2:79:BD:7E:6C:CE:66:50:B7:E3:16:05:4E:8F
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:50:40:53:ff:6c:38:ce:bc:80:78:9f:f9:ef:9b:04:d4:8c:
d7:3d:5b:53:53:4a:3b:69:0e:66:4d:5b:9c:5d:c4:da:94:93:
0a:65:a3:ed:1d:a2:07:79:74:42:a1:e1:da:85:74:58:3d:fa:
f3:17:e3:50:4d:be:f9:cc:9d:9c:aa:7a:a4:27:e4:86:9e:2f:
f3:86:db:f1:a5:46:bc:99:fd:99:60:24:74:55:cd:da:a8:ac:
37:7e:85:1a:21:e0:d3:53:75:39:65:f6:c3:c3:85:ed:24:de:
4d:51:de:fb:d0:c9:0b:80:e9:0a:32:b7:65:fa:15:cb:ef:0a:
af:07:74:c9:a6:cb:ea:60:40:c8:23:27:e0:b5:6a:92:82:64:
e3:c9:34:9b:dd:9a:28:d2:21:d0:75:ae:26:3c:4b:a7:44:55:
b5:e4:87:8e:60:d1:b9:9b:48:8c:17:d3:fc:24:80:fc:e2:01:
73:58:c1:9f:60:f6:e2:f3:67:1c:dc:e7:4c:c0:b7:23:0a:19:
e6:9e:c2:39:0a:04:7e:be:c8:db:ec:5b:d5:0f:90:4b:5d:0d:
4f:60:cd:d3:8c:a0:02:6e:d6:0b:71:14:8e:05:84:04:73:00:
59:cf:75:7d:d2:72:15:d1:99:d3:1e:1f:22:46:b5:54:97:a7:
62:f0:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:51:17 2025 by rpki-client