Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: XjVlMcLXjQ0cMgDtmucW8VMriXlmIWyU9b19O3BCvRQ=
Subject key identifier: 73:27:45:E6:5E:42:FA:D6:E7:4F:09:EC:97:7D:B8:45:23:3A:B4:63
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 019A4D742583E6200A424E2A52E9232DE473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: r/yyufUJhL9+tTCvgZZaEr6oZR1KuMZtGPCUkouNmcM=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:25:83:e6:20:0a:42:4e:2a:52:e9:23:2d:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=732745e65e42fad6e74f09ec977db845233ab463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:a5:a8:62:aa:e5:84:de:18:78:88:51:1d:
a2:43:b8:a9:37:bd:34:bd:17:9f:89:01:77:95:c7:
9a:d5:b3:08:8e:ec:66:bc:03:dd:3c:eb:0a:a5:d5:
ae:e4:b2:21:98:d8:34:ff:06:57:19:3f:08:f8:41:
56:48:12:c6:5a:13:7a:ed:b7:7d:22:d4:c8:56:6c:
ae:1e:cc:43:a8:ed:86:28:d4:3b:ca:23:46:34:bf:
4e:02:e6:4f:bf:aa:40:16:ac:80:3b:a2:24:2a:66:
31:cd:9a:30:aa:e5:ac:7b:b4:84:ce:fe:c5:a1:58:
25:b2:23:52:93:93:9d:21:0f:ed:df:cb:37:df:39:
28:3d:70:19:53:6c:d0:48:43:1c:42:e7:82:a6:83:
33:ce:ad:9d:86:3a:b2:e4:bf:85:d1:8e:5f:42:e6:
1b:56:4b:f8:a7:15:af:2f:fd:80:77:d0:c4:00:d0:
42:bc:1f:05:ce:bb:49:81:3b:ea:ae:41:d4:c6:b6:
de:8e:e0:72:f8:63:02:7e:19:ff:52:a5:a0:4e:c2:
8a:62:03:02:07:6c:10:7f:99:39:e1:14:e8:cd:af:
c4:8c:a9:40:3a:9d:11:a3:51:98:7a:86:5b:5c:e8:
e3:14:dd:8a:0f:4c:5c:48:e2:7a:38:b2:52:8e:ff:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:45:E6:5E:42:FA:D6:E7:4F:09:EC:97:7D:B8:45:23:3A:B4:63
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:e6:2b:e8:a6:82:93:31:a1:d4:44:1c:c2:a2:3f:7e:d2:
0f:c1:a2:27:ac:2b:6e:c5:b8:91:a8:91:f1:3b:8d:b9:ab:ba:
a3:75:b8:13:ea:34:7c:41:a0:a8:51:fa:e9:98:c0:40:3b:69:
16:74:62:1d:2f:2b:26:15:56:5c:1e:7b:99:38:7f:05:21:15:
a9:b7:8e:bf:ca:15:33:24:df:fe:9a:d0:f5:c7:c3:95:09:eb:
1b:d6:85:98:d4:88:d3:84:ea:8c:88:0f:08:fd:ab:02:d7:de:
ef:00:dd:fa:17:0e:30:11:37:b9:b1:8a:d1:aa:0f:b1:25:12:
c8:16:58:42:ad:e0:51:32:95:34:42:b4:42:c9:41:71:df:02:
63:34:a1:6f:94:fe:c2:15:21:1a:30:c6:05:fc:0a:29:31:20:
45:65:e3:f2:58:0f:7d:fa:42:2d:19:92:72:c4:2f:62:94:7b:
12:47:3e:e4:12:06:11:d0:e8:7a:12:68:6f:4e:e4:b4:ac:c9:
4b:4a:d1:88:76:27:6f:5b:b5:6d:94:2a:a4:2d:7a:59:be:32:
2c:27:51:2b:fd:1a:f7:05:7f:0e:83:18:c5:ed:9f:c1:32:e0:
fb:0a:31:77:b4:65:ec:1f:cb:f1:fd:90:28:ca:bc:26:4a:82:
40:f7:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:07 2025 by rpki-client