Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: 6Wqc0kU4oph001TowIAAQemTjQk9XI9PFacbaGYXANc=
Subject key identifier: 41:2B:14:A3:06:0F:E4:6E:4A:DD:94:36:48:1F:47:2C:AC:67:E2:8F
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019A4EF5D57E7960C16D50CCB8A73B288C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 171F
Signing time: Tue 04 Nov 2025 13:02:05 +0000
Manifest this update: Tue 04 Nov 2025 13:02:05 +0000
Manifest next update: Wed 05 Nov 2025 13:02:05 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: rs6m0GgfyorCy6/NVOwQyECGyRnInhC2kBrAAJt0W4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d5:7e:79:60:c1:6d:50:cc:b8:a7:3b:28:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 4 13:02:05 2025 GMT
Not After : Nov 5 13:02:05 2025 GMT
Subject: CN=412b14a3060fe46e4add9436481f472cac67e28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:16:05:00:14:b1:18:5e:11:ff:fb:f2:37:
78:a5:38:21:7b:cb:36:eb:56:6c:54:d2:16:ba:e8:
b8:10:72:67:99:f7:09:a2:e0:30:da:c9:e5:4c:ce:
68:83:7e:a3:51:35:34:86:e4:0e:29:1b:6e:5f:00:
d7:29:e4:54:2a:52:2b:bd:4c:3f:5a:b8:ba:2f:ea:
fe:72:c9:80:07:cf:02:b1:fa:d7:2c:0c:e9:75:09:
68:01:3c:b0:a8:1d:bb:76:e0:cb:95:8c:24:85:26:
0d:43:a6:89:b7:d4:c3:3f:e0:89:e3:0c:b0:cd:3b:
9d:e9:bb:48:2a:be:f3:29:68:9a:54:77:2a:85:12:
7c:5f:87:09:a5:e7:93:5f:ad:b3:78:ab:ba:5c:64:
81:c1:c6:28:8b:29:e0:5a:4c:c3:15:55:7c:6f:c8:
7d:7b:b7:8d:6e:91:e9:c4:9e:92:4e:d3:c2:82:53:
f2:b8:80:8c:9d:40:62:21:97:6b:08:1c:da:77:b1:
b4:a0:90:c8:27:2e:9f:b7:07:15:52:bd:87:10:7e:
66:f5:da:e2:71:c8:bd:db:de:f4:be:c4:9e:3d:0f:
6d:be:29:f3:54:ab:f2:13:00:61:eb:60:6b:b5:9a:
e2:b0:ec:0f:65:07:b4:a8:7c:1d:d2:08:a2:b0:ab:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:14:A3:06:0F:E4:6E:4A:DD:94:36:48:1F:47:2C:AC:67:E2:8F
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cd:8b:64:c2:a9:e7:d0:07:dd:ab:66:15:7d:e9:37:5e:c7:
c3:6e:8f:93:ad:c0:7a:b8:2c:82:16:72:87:51:67:b1:02:56:
a8:fd:63:52:5a:53:ab:40:19:e3:1d:da:9c:82:8e:f1:84:22:
43:71:f7:90:4d:4c:59:84:fe:07:b7:03:d7:a5:be:3d:4f:50:
69:ad:18:69:5b:78:94:e3:cc:ef:1d:74:9e:d7:a9:89:53:31:
a7:3d:58:49:46:9b:96:5a:f2:32:e7:4b:81:31:57:82:58:65:
d0:3a:cb:0f:84:b4:26:65:96:6e:f4:2d:06:20:99:3a:40:06:
7a:8f:6f:32:8b:6d:d6:dc:89:c7:9f:e8:33:18:a1:b8:11:62:
55:a0:c6:9b:9e:e3:87:f6:11:ff:15:e2:db:49:2a:9e:e9:92:
d7:5a:69:05:1e:7c:b4:ef:57:8d:89:f8:b7:a4:dd:b5:9b:28:
ac:79:86:36:09:41:fc:9a:fd:80:d8:7c:ed:ff:02:2b:9b:e2:
be:83:be:49:65:1d:8f:d2:79:44:e8:d0:03:af:5f:4a:24:1a:
84:f3:aa:ce:25:8e:21:01:19:18:10:0c:44:eb:ec:5e:a5:e2:
82:7c:6b:ac:c6:70:04:59:55:51:93:3c:93:cb:d8:5a:43:70:
25:b2:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:31 2025 by rpki-client