Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier: WwIFkvNnFWHZzGaZ4hpoFoM4HUFlwanmH6MSIk3O8Eo=
Subject key identifier: 23:7F:0A:65:3E:CE:41:0C:A5:13:A6:FA:7C:19:B1:89:4B:CA:82:89
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 019A4EF4676F8F96F1F54D5959D8EBC310FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number: 171F
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=)
2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=)
3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=)
4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=)
5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=)
6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: TrAQRojXwkjcxLe+COMbKfd9OrB3okP9sckeBQFsNv4=)
7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:67:6f:8f:96:f1:f5:4d:59:59:d8:eb:c3:10:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=237f0a653ece410ca513a6fa7c19b1894bca8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:1a:6b:85:9c:20:2b:41:c6:09:03:d8:26:
e2:72:0f:28:5d:3e:39:b5:cc:9a:c8:8b:8f:88:ea:
c8:fe:1e:61:88:80:f4:09:c2:aa:6c:b2:2d:11:72:
b1:30:3e:fa:b9:03:de:2b:8b:cd:6e:9f:7c:21:eb:
e4:20:c8:ed:ca:b0:51:32:3f:4f:c1:fc:fd:70:9a:
9a:28:03:53:9a:d2:30:9f:53:fe:8b:d3:05:28:e7:
71:a9:08:d2:37:82:ba:03:89:72:98:56:de:a6:6e:
97:75:ef:c6:53:b7:f2:91:07:70:14:5a:a2:ad:7f:
95:d2:e7:b3:a3:d4:4a:c1:5b:ca:76:af:c5:78:91:
4c:43:3d:2f:5a:0f:c2:5b:d2:41:ed:8d:aa:80:45:
6d:cc:5a:40:dd:d7:6c:89:47:36:3e:3a:87:14:5c:
6c:b3:10:f4:93:98:77:f0:b5:d5:7a:b7:a5:50:14:
89:2d:2d:47:95:3d:dc:3d:bd:c5:a4:30:90:45:dd:
30:fd:51:77:07:2b:43:95:e4:76:e5:63:98:2a:b6:
80:a1:fe:9b:06:1c:1a:6d:9d:ef:49:de:8e:ec:39:
ba:7b:71:08:0a:07:7c:24:7e:76:7c:e6:dc:4d:d3:
da:6f:94:e8:39:dc:11:96:88:50:dc:08:be:5b:6a:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:0A:65:3E:CE:41:0C:A5:13:A6:FA:7C:19:B1:89:4B:CA:82:89
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1f:63:ec:4b:70:6a:87:2d:40:dd:2f:70:f1:37:93:34:d9:
a0:bf:ba:1f:a5:83:35:02:60:c2:07:6b:6d:63:87:34:1a:88:
c9:be:71:46:6d:09:1b:3f:ec:ec:ed:e9:25:34:5c:c6:c2:30:
83:03:4c:d1:dc:73:b7:a6:21:9b:ab:d4:5e:8a:3f:ac:7a:30:
0a:74:e9:61:d6:f2:a0:9d:83:8c:fe:cd:f8:e2:37:16:28:39:
06:a7:f0:f4:10:20:42:51:7a:aa:24:b4:91:10:eb:6b:ee:b3:
97:84:c4:c7:16:b7:c4:38:46:b1:db:f3:a6:9f:83:d2:c2:e2:
97:23:b9:2d:e1:5e:49:d5:da:a8:8a:7b:ee:c9:aa:09:c4:ff:
22:bb:6e:c6:f4:e6:d9:5e:f1:2a:3a:34:b1:93:ab:41:4d:de:
85:aa:c6:fd:6d:98:b4:de:18:5b:12:a7:51:f7:5c:6a:44:52:
39:8c:88:9f:84:c1:4e:b0:ef:ae:86:8e:64:bd:8a:d9:fd:e4:
c9:fc:fc:45:4c:86:4d:07:bf:c0:3b:ba:6e:f6:b1:53:1d:df:
a4:64:26:42:64:8a:c8:09:4f:38:21:90:1c:7e:14:a0:e3:5b:
5d:21:ed:87:62:34:0f:02:43:59:e2:45:4f:75:05:6a:90:57:
c9:64:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:26 2025 by rpki-client