Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: RpCFRNkwGetWzfdOeYqyRsWBgEZvIsvg/Z2bMu5mx74=
Subject key identifier: B2:1B:90:20:CE:F8:E3:CE:60:1D:F1:3C:90:78:9E:9D:86:AE:C1:8D
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019A4FCFD40A8195A010B87EE2B6C571FD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:11 +0000
Manifest this update: Tue 04 Nov 2025 17:00:11 +0000
Manifest next update: Wed 05 Nov 2025 17:00:11 +0000
Files and hashes: 1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: ta0JAYnqS27Axg1xwpZPtWyL85ZGILTQ9ZaWPEFyBzI=)
3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d4:0a:81:95:a0:10:b8:7e:e2:b6:c5:71:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Nov 4 17:00:11 2025 GMT
Not After : Nov 5 17:00:11 2025 GMT
Subject: CN=b21b9020cef8e3ce601df13c90789e9d86aec18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:5c:9b:f8:c0:48:c9:a3:11:20:1b:a5:bb:
81:2c:80:58:eb:9c:dc:2f:29:e9:1f:f8:31:b9:a5:
0a:7b:b0:03:65:bb:93:3c:f4:81:b6:68:b6:2a:f1:
c1:90:c8:30:67:6f:19:b7:9d:fe:14:e0:e3:48:c5:
84:ad:60:93:92:7c:36:9b:96:9a:0b:96:4b:42:68:
36:63:34:a2:ad:80:36:b4:99:cf:e5:85:1b:b3:b8:
3d:0f:cb:f4:99:e2:25:72:ea:a2:29:a1:26:1d:5e:
0a:f4:91:e0:62:e2:35:b3:53:0f:42:e7:ee:b1:99:
44:21:fc:cc:34:fe:30:05:31:a5:7e:75:ed:c5:b1:
55:b6:fa:1b:34:b9:4a:ec:f2:cc:a4:fa:3a:0b:5e:
31:03:8c:73:ef:20:57:45:a2:a9:6e:b5:73:3e:69:
d8:b4:ea:28:56:dc:c0:65:38:24:42:6c:cf:dc:62:
68:22:fa:28:c1:cc:35:23:1b:3f:fd:cf:ff:95:25:
17:48:0c:72:ae:7a:ab:ee:e2:7b:fe:ce:b9:81:b6:
e9:4c:f1:72:d3:08:b7:71:19:ca:68:ba:b5:bd:10:
64:db:41:25:92:93:0a:34:4d:35:81:43:fa:ea:17:
f0:86:1e:6b:f4:dc:9c:4f:77:e6:21:25:be:04:9d:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:90:20:CE:F8:E3:CE:60:1D:F1:3C:90:78:9E:9D:86:AE:C1:8D
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:5b:84:50:4d:68:12:80:71:6d:86:8c:72:3d:5a:49:e8:
64:45:56:07:46:09:b9:71:43:7f:fd:01:5c:cc:d1:41:30:f9:
09:22:b0:24:06:1e:a6:06:d2:e6:e7:5c:ff:da:d6:d3:23:c5:
1a:37:3b:77:a6:8c:95:92:cd:5b:4b:94:70:f5:bc:e3:69:15:
25:6e:09:f2:07:ed:0a:56:62:44:4b:6c:15:07:af:68:3a:b0:
28:d5:10:8f:ad:c1:22:c3:2c:72:f4:e3:3f:41:39:d4:44:a2:
c7:41:56:10:5d:5d:d3:a7:7f:5a:0f:13:3e:23:39:21:0b:52:
f2:a7:ce:85:13:bc:a9:0c:c5:98:3e:29:5c:a2:d2:6f:6c:91:
2a:81:f0:c8:e1:09:e3:cd:b1:7f:0d:80:90:0e:1d:0b:52:b0:
59:2d:a9:0b:ab:c2:d3:32:9c:82:d0:7b:b3:e8:54:ee:d4:3a:
54:f0:31:ee:96:1e:93:1f:1e:71:99:e4:42:29:b8:c2:da:58:
f1:87:03:23:34:15:59:d7:6c:ef:26:c9:49:b0:af:e7:6b:30:
ed:59:ed:f8:b4:a2:17:f8:e1:8f:ea:db:41:63:86:c9:f6:48:
d5:15:b4:e7:24:38:8a:1a:ba:fe:1f:ea:9b:41:8e:f6:0f:34:
70:ab:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:59 2025 by rpki-client