Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: rEnHtsLxmkRgEBtmrY34CmGkWZ6a7WcctRG9yOwV2ss=
Subject key identifier: E2:0F:07:B5:92:3F:C0:EF:0D:10:07:48:AA:F1:51:4D:04:11:67:EA
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019A522C69F83F4DCD8A21F9C82E6E07539E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 7A
Signing time: Wed 05 Nov 2025 04:00:33 +0000
Manifest this update: Wed 05 Nov 2025 04:00:33 +0000
Manifest next update: Thu 06 Nov 2025 04:00:33 +0000
Files and hashes: 1: BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa (hash: KmHgJDlPkXFpo1uiCXVfBs7N0PdhXHFV0wyXs4DH/BA=)
2: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: cqrsDkaJtJt6gAEclhFUte5bAJ/SZOK2KuzDgVLX3V8=)
3: aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa (hash: MGV2Z9M1at0wNrbd7sJUTfzjsFPuLQEHyaT+MULw+wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:69:f8:3f:4d:cd:8a:21:f9:c8:2e:6e:07:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Nov 5 04:00:33 2025 GMT
Not After : Nov 6 04:00:33 2025 GMT
Subject: CN=e20f07b5923fc0ef0d100748aaf1514d041167ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:f4:19:67:2f:78:cd:cd:eb:30:17:72:76:
3a:9a:07:45:6f:5f:3a:a0:4f:44:dc:1c:b7:28:5e:
74:be:cd:ee:21:75:f8:76:0c:6a:3f:da:dc:35:67:
42:01:cf:e1:cd:ba:ef:bc:a7:e2:95:36:6a:9e:cb:
f4:6e:63:43:9b:46:00:2b:73:12:47:92:c5:f2:d5:
eb:17:32:93:a8:13:a5:96:4d:3b:c3:e0:65:ab:34:
36:7a:8f:aa:1c:7d:79:4b:f5:9a:fd:04:1a:d4:a2:
17:56:ef:6e:0c:d5:53:9d:00:06:a1:e6:8e:93:75:
6d:78:17:5b:c9:a7:cc:44:70:e6:ff:db:08:3b:e6:
4a:81:ae:95:1f:d7:12:10:e5:8a:06:88:c3:f1:2e:
17:db:66:67:5b:06:db:9c:74:c0:80:a4:eb:92:e3:
7f:14:c5:43:57:8e:25:f5:82:16:57:fa:15:e6:28:
e4:a3:83:73:53:29:1f:6e:91:87:60:1a:f5:c7:17:
38:21:02:46:fe:37:b1:3f:af:ed:80:82:04:39:7e:
48:e9:3e:af:c8:e6:43:d8:c3:90:f5:c4:9b:06:1d:
71:13:a3:0b:3f:cf:dd:ce:fe:ee:71:91:c5:07:27:
12:7a:a5:49:30:99:a5:67:6a:4e:40:8f:74:e0:e0:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:07:B5:92:3F:C0:EF:0D:10:07:48:AA:F1:51:4D:04:11:67:EA
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1b:f6:6a:07:5f:65:d9:fe:85:10:71:94:ec:4d:35:44:f6:
6d:3e:bb:1b:09:5f:ff:23:6b:40:2d:b2:d2:f6:24:1b:c8:4d:
5f:21:fa:d4:38:30:3e:f4:d5:b8:1c:e1:cb:d6:13:b7:a6:d1:
34:dd:03:78:b9:c9:8a:08:33:02:ee:8e:58:da:41:12:5e:69:
27:ce:5c:db:23:bd:00:7d:93:81:ed:60:db:98:9f:8f:b3:0c:
c8:b2:82:a1:ec:a1:38:6f:d7:56:a9:ba:b4:61:f5:31:72:3d:
a4:9a:5c:bb:0a:05:67:47:af:c8:19:52:70:0a:71:ed:e2:1a:
fc:e5:b9:c0:c5:3b:ad:bd:ea:15:74:c7:b9:7c:9e:9a:78:58:
b0:1d:35:da:5c:aa:67:f3:0f:8d:ca:82:97:d0:a6:92:27:6a:
bb:50:ab:43:d1:8d:78:d9:a4:9e:37:63:cc:24:cd:ed:13:5c:
62:4a:58:42:79:fc:6b:6d:91:55:41:c4:8c:44:b7:74:64:bf:
a6:46:f4:ac:d0:c9:8b:38:ed:74:4b:4a:06:b2:78:b7:27:01:
4d:05:ab:41:ad:aa:38:32:8c:2f:b6:d9:9f:68:a7:70:bd:21:
e5:7f:2c:ec:2b:9a:a8:36:b1:31:b1:d9:6d:bd:af:84:93:03:
eb:a4:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:48 2025 by rpki-client