Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: y2DhmkADjjwf+jNI7jDM0+nfwN46KHiYZgpVncLqmE4=
Subject key identifier: 73:C9:12:02:82:E5:A4:64:E8:42:57:D7:04:9C:46:5A:A4:A5:15:9A
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019A4E4F9E7F677B78A45B20F2FE2191AC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0A6E
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: JcixuE1jwh8uFhARWTytFheHr7EWst2LbC23YkgEHsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9e:7f:67:7b:78:a4:5b:20:f2:fe:21:91:ac:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=73c9120282e5a464e84257d7049c465aa4a5159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:a9:9c:10:2f:6b:27:55:74:ea:6a:1f:9d:
a6:8f:91:44:d2:15:af:a7:56:07:5e:2e:3a:c1:65:
66:f2:40:77:de:8f:70:3e:a5:aa:d3:f6:67:e6:31:
94:a4:db:87:a7:90:fb:d2:72:4d:a6:5c:4a:a0:ea:
e6:95:80:75:69:75:46:e4:00:a2:d6:a9:c1:45:42:
d0:d2:94:ea:1e:90:34:af:45:4d:61:3d:3d:20:02:
7d:0f:1b:f2:e0:b2:45:98:8e:aa:d4:05:0c:6a:a9:
96:bd:c5:c1:9f:1c:cd:4a:e6:e7:82:07:42:c0:4f:
1c:5b:97:8b:bb:4d:0b:b4:f2:37:43:7e:3d:9c:00:
a6:97:15:ff:1a:99:53:7b:cf:e2:6d:d9:62:2f:e0:
bd:a9:69:6c:24:ce:9a:e7:8b:f2:ee:2b:a6:e4:47:
ea:ae:b3:38:60:69:b7:b3:73:6e:23:cf:86:7c:c1:
b8:80:9a:83:a1:b9:37:fc:a5:b8:2b:8f:af:58:99:
95:79:b9:74:f3:9b:d1:3d:e0:7c:53:f0:1a:b5:86:
d4:77:e5:4b:18:75:44:90:cf:fc:92:65:6d:3d:ac:
44:9a:bc:b7:27:91:1b:00:42:94:8c:02:ec:ef:10:
5b:53:ed:68:bb:a5:9e:20:f3:09:18:ca:11:6a:04:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:12:02:82:E5:A4:64:E8:42:57:D7:04:9C:46:5A:A4:A5:15:9A
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:f6:36:95:7a:7e:02:ca:ac:2c:d4:6c:5e:23:1e:7e:64:
b6:31:d8:93:af:82:a9:06:df:25:0e:ac:17:98:f0:b1:fe:37:
00:53:39:81:7f:9d:2b:03:b1:d4:37:93:46:d4:d2:8c:2f:fe:
ac:f8:a9:1d:5d:1d:de:dd:e7:dd:ed:d1:47:58:34:42:f9:bb:
1a:47:b0:1f:ef:fc:6e:20:49:13:41:e2:ea:7a:28:20:40:d1:
19:cb:b5:39:fe:f3:27:e6:16:20:18:8c:fb:00:e7:f5:4a:09:
c4:a5:ba:37:21:ad:02:dc:28:90:fc:ee:1d:f1:7d:32:b2:3f:
02:d4:76:ad:e7:bc:fd:04:d7:b6:d7:9f:f7:2d:83:ba:c9:1f:
3a:a5:da:86:3b:d8:62:f8:66:52:06:99:16:97:d2:90:ef:80:
0e:93:f1:80:b1:2f:b7:03:e5:f9:90:70:9e:fb:27:94:72:3d:
bb:75:23:fe:78:b0:c6:2b:a9:35:39:b8:66:e7:fc:7d:fe:94:
9a:c9:77:c4:3c:37:0b:38:8d:52:c3:39:a4:74:78:0c:59:26:
0b:71:43:e7:19:6f:c9:78:25:3d:44:d4:8a:94:30:41:f4:32:
2c:9f:73:9b:3e:e7:ed:a7:a9:f9:89:14:8b:21:63:17:8a:a1:
dd:ca:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:06 2025 by rpki-client