Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File: _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier: ufVmL/8jRo09pWrrCtLiOS8oR4HBkL0lnJRR1yB463g=
Subject key identifier: BC:C6:EC:17:60:F3:2F:A1:7F:72:CE:43:FE:86:75:03:A2:D0:D4:C5
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 019A4DE1CDDDC8966C33195C52E7B4C6B2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: 6rfSl-YG8Bpw7iFs3OGfejPmBow.roa (hash: xWZc5l9yPZ6h0RVi3qTPSak9kbYfcpqaIIv+IYE4hs0=)
2: RjzornIpBpWAVg31mbW6GCIn3FE.roa (hash: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=)
3: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: a9TFjCQBel/CSkAv7u5BRiGYIARvSvkSXZ5dgij2Utk=)
4: qodg_DBnwKRycROmAU-iKcJ4abc.roa (hash: srDO/uSK7u2lQgddrt4UOUxImFrZqcKNDp2zNmpUe54=)
5: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (hash: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cd:dd:c8:96:6c:33:19:5c:52:e7:b4:c6:b2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=bcc6ec1760f32fa17f72ce43fe867503a2d0d4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:c9:3c:3a:a0:0d:cd:2e:e5:79:e8:b2:bf:
db:b4:f4:6c:ea:8d:4b:84:5a:25:dc:ab:46:94:34:
d9:73:e0:c6:55:ab:63:a4:1c:a1:b6:8d:0e:88:6a:
3e:72:72:93:f8:2d:14:f0:3c:28:4a:69:0e:df:ff:
79:67:f5:2a:68:ae:ea:ab:0f:36:51:a1:79:af:7b:
61:35:ba:c4:1f:9c:c6:1d:7e:74:c4:50:06:0b:44:
aa:d6:77:95:55:4a:e4:4c:4c:6b:60:35:ed:c5:84:
26:d1:4f:49:b7:e5:5e:13:44:79:dd:f3:d2:e7:5a:
f1:53:8e:da:1d:e7:f7:83:28:fa:24:9f:00:0c:d8:
27:c9:b4:24:94:85:4e:ad:26:43:82:50:dc:3a:c0:
5b:6a:26:73:4d:8a:2e:51:db:72:ce:f3:f2:30:1e:
57:14:e6:37:1d:6b:0f:6f:51:27:3b:5d:6f:b9:cd:
9f:f0:6a:65:13:d7:82:2f:41:ed:c2:5f:f9:23:f2:
c0:d6:70:66:8b:47:1b:a1:58:77:8c:5e:b8:0a:38:
b1:9b:6a:87:02:5c:c6:a2:19:8a:f3:48:d1:53:c5:
3f:1f:ef:b3:32:26:bb:74:64:ff:9f:bb:5b:a3:aa:
87:4c:30:1c:cb:0b:3c:7c:2e:92:00:f0:fa:54:d3:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:EC:17:60:F3:2F:A1:7F:72:CE:43:FE:86:75:03:A2:D0:D4:C5
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8e:ef:19:7a:18:40:30:09:77:f7:c9:f3:73:3a:8c:78:76:
64:8d:e1:c0:49:c9:ad:8d:8a:37:dc:94:66:fd:a3:30:9b:60:
66:e0:6d:15:ba:9b:cb:b2:61:72:c0:86:3b:c6:50:86:e4:04:
07:58:4a:05:9a:b3:a7:1c:79:65:fd:42:45:fc:40:70:26:a9:
a5:d5:69:65:ae:90:68:0e:4c:49:1c:75:d3:c4:b3:75:5c:d8:
f7:ee:3a:f9:39:9a:dc:4b:8e:70:f9:e2:c5:3b:d8:51:82:51:
01:3a:ed:75:2e:76:c0:55:43:4a:94:1c:df:19:d0:d8:20:c7:
a0:da:ee:84:45:c7:8f:51:96:71:47:05:52:1c:3a:c4:2e:33:
43:87:a5:3c:cb:e1:91:52:9a:69:a6:f1:17:bd:35:8c:f9:e3:
6c:a5:7b:86:43:86:61:21:2d:af:48:b6:b9:94:69:5a:2e:58:
07:fe:e2:01:6b:f0:05:cc:e7:87:6e:94:9e:cc:4f:ff:43:92:
4c:63:d8:5d:0e:af:47:20:49:1a:33:5e:9f:c5:82:1c:75:11:
b2:0c:49:60:d8:c2:75:06:1f:f1:52:bf:e0:f5:f6:8c:bd:f4:
7b:fd:4c:d9:14:38:ea:dd:e8:2b:67:5a:bb:eb:5d:e8:a2:ee:
b3:c8:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:51 2025 by rpki-client