Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: ccwH6Mt2jZV9V5DNRqjw0/H239YUaOds+Wih2045Z1A=
Subject key identifier: AD:6C:7C:34:97:DB:BC:6B:81:EA:D7:CA:8C:75:D0:5D:D2:68:C9:CB
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 019A541B0F5984F8BF4E170D9A0D323B9579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 0135
Signing time: Wed 05 Nov 2025 13:00:50 +0000
Manifest this update: Wed 05 Nov 2025 13:00:50 +0000
Manifest next update: Thu 06 Nov 2025 13:00:50 +0000
Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=)
2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: lL3CRDjZrQDWQnCS7a25GKH1BsQhqjeY1S5Y4wpcWak=)
3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:0f:59:84:f8:bf:4e:17:0d:9a:0d:32:3b:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Nov 5 13:00:50 2025 GMT
Not After : Nov 6 13:00:50 2025 GMT
Subject: CN=ad6c7c3497dbbc6b81ead7ca8c75d05dd268c9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:2c:62:b0:9e:81:46:47:b1:3f:81:ae:68:
de:33:58:24:5c:20:96:d5:06:01:fa:e5:a9:3b:5a:
58:95:4c:32:4a:d7:14:0c:78:a3:60:25:66:b9:bb:
0d:e6:60:16:1e:e0:93:a7:2d:bd:c6:00:42:8e:af:
3d:17:b1:79:8b:8e:41:f6:46:42:13:7c:40:ae:ec:
18:28:ba:27:24:0e:07:2b:af:ee:dc:8e:50:74:b6:
b3:1c:9c:e1:e0:d7:4b:43:b6:53:4b:a1:82:26:27:
37:09:c6:ee:2e:f9:61:a3:45:57:4d:cf:b1:86:76:
53:e7:8d:4d:3e:15:21:eb:42:a1:b1:31:ce:9c:58:
a1:a3:8d:52:2f:43:31:b9:94:1f:80:2b:72:3e:d9:
2b:99:51:6b:31:1f:3b:0f:3d:92:57:de:53:2b:43:
a3:78:2e:be:3a:cb:2c:d3:51:bf:f5:7d:3f:4f:29:
73:55:71:5b:23:1c:7a:28:e8:66:d3:dd:88:e6:3c:
23:2e:cd:27:f3:56:b9:1f:8c:d4:39:0f:49:23:a6:
39:1b:8f:4e:d0:58:6f:2b:67:24:b2:fb:56:e1:90:
19:d6:0a:26:c3:61:47:3a:28:a7:9d:56:66:7a:22:
84:07:fb:38:ce:54:0b:ff:55:6d:a5:bf:04:5e:49:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:7C:34:97:DB:BC:6B:81:EA:D7:CA:8C:75:D0:5D:D2:68:C9:CB
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:39:48:35:0c:0e:55:ed:e1:31:3d:35:ad:1b:3d:fd:88:
70:a0:e2:f9:a2:ae:f7:6c:7c:6e:c1:db:11:ad:67:cb:37:ce:
5a:8d:f4:03:07:ca:e3:a8:87:1d:75:ce:b0:9b:32:95:c9:76:
78:77:75:b6:58:8a:ef:91:cd:c7:76:4a:a9:2b:10:47:69:c8:
10:02:45:22:09:b8:04:6b:f0:23:dc:87:e0:75:1a:a1:86:23:
2a:23:64:4d:5e:46:56:cc:9a:99:c9:ac:1c:01:c1:4a:e4:9f:
76:38:61:41:19:07:a5:ae:96:d5:92:9e:55:68:e0:4d:c3:dd:
a9:f4:4f:22:38:bf:f7:38:0c:23:5c:91:e3:21:71:53:bb:cf:
5d:72:52:2e:c7:8f:0e:8a:bd:1b:f9:f7:e1:ed:b1:0e:f2:34:
18:d5:15:6d:09:37:47:b1:11:c8:3d:08:22:9a:45:aa:60:3e:
63:a1:0b:85:c2:96:e1:10:82:4f:9f:64:7c:e2:0e:fc:0f:83:
ee:a1:dc:d5:a1:aa:42:2b:df:e7:f8:62:12:63:a2:5a:43:2d:
fe:0d:2c:e9:85:55:ab:4a:f1:ae:ec:71:9d:6a:5e:bf:e6:7f:
38:a0:6f:2b:8c:ef:29:98:6a:1e:bd:b7:3f:34:60:02:76:14:
45:4a:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:38 2025 by rpki-client