Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: uSYecTOtY4x9mP7MOnkBXk81VMRI8Yn65ENFyKx6huQ=
Subject key identifier: C5:19:8B:09:8A:E2:FA:1F:55:88:C8:72:56:D0:B8:D9:45:A2:F7:67
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 019A4EF470EF1EABAD5FCDCE9D8152EE9FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 1498
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=)
2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=)
3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: 3TbqAylr4rLeJDdWy5ji93U5I42TVN4XvyFrc1MYtjM=)
4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:70:ef:1e:ab:ad:5f:cd:ce:9d:81:52:ee:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=c5198b098ae2fa1f5588c87256d0b8d945a2f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:ec:9a:4b:7c:a0:09:69:18:2f:29:0b:ee:
c2:f9:80:54:8d:01:a2:18:42:99:0c:33:32:8b:02:
fc:e4:20:80:05:62:8b:4b:ad:f1:2a:2a:93:2b:e8:
ea:dd:67:fd:0b:d2:c2:10:7e:05:81:f3:6c:8f:cf:
69:a4:da:b1:b4:f9:a4:3e:25:dc:2b:17:af:86:13:
80:9a:f6:6e:48:a6:19:0b:90:70:36:98:83:86:f4:
6e:43:71:6c:13:c6:4e:df:02:bd:ad:61:9b:69:39:
b4:27:e8:53:c4:39:52:bc:77:1b:4b:63:36:1f:f1:
ba:61:a2:e7:c0:1f:af:6b:25:cd:32:55:58:46:71:
02:04:21:63:21:e9:f9:95:3e:13:c2:7e:fc:9a:0f:
45:19:be:c5:7a:7b:4d:52:e7:bb:79:e2:8d:50:de:
94:29:14:29:53:1f:8b:19:31:02:01:be:e4:db:35:
7f:c3:45:30:0f:e5:af:9f:51:27:fa:86:f7:54:78:
67:bf:cf:be:7f:4e:3a:f3:e2:a9:36:a1:00:6b:b3:
88:43:f3:53:e7:d1:24:a9:6a:fa:f5:c7:8c:7a:2c:
8a:d7:95:b7:a0:02:85:11:c0:bf:0a:54:43:45:b7:
aa:65:71:34:cf:e2:24:1b:22:64:f3:67:bf:c7:d3:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:8B:09:8A:E2:FA:1F:55:88:C8:72:56:D0:B8:D9:45:A2:F7:67
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9d:eb:d1:05:22:40:e0:05:b6:4e:31:99:f5:7a:52:98:31:
47:61:c2:e9:f6:56:30:c8:30:d7:77:ca:d3:4d:33:e2:b5:5b:
2c:1a:1f:19:85:3e:98:5f:4b:18:49:57:c9:81:c4:80:0d:c7:
97:16:a1:17:b4:50:e5:b4:88:48:05:7a:e6:67:ad:f3:d0:25:
e4:25:c5:e2:a9:e1:f7:0b:7b:39:7b:9d:38:cd:ce:d3:87:7c:
df:7e:8b:21:69:75:58:a9:35:44:3f:eb:f9:7c:e4:5d:70:a5:
37:10:e8:0d:14:e6:ed:1c:15:95:91:29:18:b5:29:bc:46:bd:
f9:5f:a3:63:56:ad:7e:b2:05:34:7b:33:ac:54:4c:e7:0d:e6:
dd:4b:a0:c6:ee:8b:ce:ec:8f:e1:50:14:40:51:a8:41:cb:6b:
0b:de:b1:f5:1f:80:93:07:4e:df:c4:a6:95:60:2a:04:30:0b:
ae:4c:94:ea:59:06:e5:dd:6c:4e:c3:5f:5a:45:d4:88:bb:ab:
b1:d2:cf:72:ae:83:5c:65:f6:5c:a5:7c:52:eb:62:a8:dd:18:
07:a4:ce:85:92:fb:e9:8d:91:8d:13:0f:18:c5:56:80:ce:a9:
95:38:b5:0e:f8:59:71:86:f5:b0:1e:4d:71:77:17:82:a6:95:
d5:6d:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:21 2025 by rpki-client