Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: f9EkJ4n1yUGZuVG6VI58sR8x+cSBXRxypzA0ymLqUP0=
Subject key identifier: C5:79:5E:79:91:63:89:8F:13:81:CC:CD:90:92:70:40:C8:98:08:F9
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019A4C619FC4EC0BE8FEB5A6C994E419072B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 11D2
Signing time: Tue 04 Nov 2025 01:00:57 +0000
Manifest this update: Tue 04 Nov 2025 01:00:57 +0000
Manifest next update: Wed 05 Nov 2025 01:00:57 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: jYt8kqLeGM6wdvfCnLk1NDhBD1l0EAqS/WrVPGRA3Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:9f:c4:ec:0b:e8:fe:b5:a6:c9:94:e4:19:07:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Nov 4 01:00:57 2025 GMT
Not After : Nov 5 01:00:57 2025 GMT
Subject: CN=c5795e799163898f1381cccd90927040c89808f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:86:97:00:4a:3c:6e:ba:da:ea:08:cc:d4:
83:d1:d8:8b:89:a7:02:d3:98:a1:55:48:9f:cd:5f:
3a:52:5e:68:5d:7e:d4:b4:cc:7a:e7:7b:56:2c:3b:
c6:8f:22:95:4f:c7:27:a0:0f:4d:92:7d:42:96:e0:
f1:d6:b7:04:f0:27:72:28:87:f3:a2:96:13:14:9d:
c7:da:38:a9:41:34:2b:69:57:81:7f:1a:55:c9:89:
d5:55:67:bc:8e:df:01:c4:47:05:c4:a6:53:72:38:
d8:37:35:ee:2e:4a:3c:3e:d1:4b:f9:fc:04:5a:34:
c8:51:6d:8d:f3:c1:98:e1:12:b8:00:e7:ce:45:07:
a8:61:d5:0e:f0:f8:9d:05:c5:61:74:b8:a3:77:08:
d3:94:d1:32:4d:ce:b4:e5:6a:da:d9:9c:03:39:75:
5e:43:6a:8c:b5:d8:88:9c:d0:7d:07:58:1e:2f:b8:
e6:7c:7f:c0:4f:89:da:ee:10:6d:59:ec:e3:6b:5f:
34:97:3d:03:a4:d5:01:d7:e3:65:b4:22:4d:eb:7e:
d6:19:88:19:d3:0e:c6:2a:f8:bb:0b:a1:ac:5c:60:
69:41:3a:4e:49:e7:97:da:10:48:61:4b:8d:5a:ec:
5f:93:a0:61:57:e7:81:27:0f:65:93:da:59:90:2a:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:5E:79:91:63:89:8F:13:81:CC:CD:90:92:70:40:C8:98:08:F9
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:4a:c3:14:c3:0f:47:d8:a0:d1:b2:a7:e9:50:ab:ac:2b:
e6:91:ad:80:a1:e6:ab:71:80:eb:3d:21:f8:37:41:b7:93:aa:
26:aa:96:1e:2e:a8:70:cf:ce:85:3d:16:01:b6:ac:1c:79:a6:
f1:9d:59:cc:34:a2:cb:a5:1f:fc:a2:59:00:3c:07:01:81:7d:
82:99:ce:9d:10:3f:38:11:aa:5e:5b:17:4e:82:45:ec:5b:7f:
b9:67:71:6e:76:70:30:e9:13:d4:30:ba:33:34:71:5e:2c:8e:
89:e9:0f:cf:6e:d5:26:54:3f:d7:59:b9:e8:f2:3a:6e:59:c3:
27:5c:55:89:d9:05:13:1d:8e:9b:78:1d:77:90:68:2f:e2:17:
30:b0:78:9e:34:18:1f:58:5d:23:56:9b:cb:66:6a:27:bd:6f:
9a:62:27:1d:65:fa:84:bd:5f:d2:c8:1d:63:8d:31:83:1e:d1:
12:72:8d:7a:60:80:6e:a7:b1:e2:be:9f:3a:d9:07:45:52:13:
51:f0:cf:07:48:81:75:7b:0a:63:10:ac:5f:8b:0f:6e:b0:d2:
f7:fe:cc:6a:af:23:0d:fc:c7:eb:3b:f9:6e:30:c7:52:82:e0:
67:b5:59:85:24:b7:dd:b8:fe:2f:ff:36:35:da:17:34:17:f7:
46:ab:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:45 2025 by rpki-client