Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: eoGKUV8YPCW8z05uhq2oj1S/02TglSTPJPYKCzDVkKA=
Subject key identifier: 98:27:8F:50:34:55:F2:36:AB:40:5D:A6:5A:89:9A:37:BF:CC:11:A9
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 019A4E191264F85E17EA8B9D068CCC3B71C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: jClWfsNZit4x01vgsVhtSu3cEZliR7MtTzmW5b8311E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:12:64:f8:5e:17:ea:8b:9d:06:8c:cc:3b:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=98278f503455f236ab405da65a899a37bfcc11a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9c:50:fb:b2:4c:f2:2c:d0:17:4a:d9:81:5c:
24:86:08:3a:13:8f:62:cd:a0:8c:5d:f4:15:6c:c8:
29:d6:ba:bf:ff:27:13:a0:5d:f1:14:38:e7:7a:24:
ab:4e:f2:cb:ed:d6:75:f7:1a:04:15:04:a5:30:1b:
c4:9f:a1:64:ad:07:59:d4:be:1e:8f:19:77:b2:ab:
b5:f4:4c:d4:ff:0a:d8:c4:0c:38:42:ce:a3:55:d0:
c5:86:7e:62:47:8c:c8:78:bf:2a:4c:43:5d:6e:40:
26:25:f8:50:37:6f:1a:62:15:5c:a9:c5:21:5e:a1:
ba:26:36:51:08:7f:0c:59:51:64:c9:e0:90:f4:09:
d6:06:49:96:3a:aa:cc:62:7e:7a:0f:e4:24:7e:4c:
14:64:09:11:ab:c2:b2:04:99:1e:3e:95:17:7c:a9:
9f:fd:fb:fc:c2:2f:71:98:71:27:ec:c9:8a:db:6b:
a6:0d:01:09:60:a6:39:85:f1:71:ee:d1:10:6a:a2:
06:5c:11:c4:3b:8a:5a:3f:e6:4c:37:93:88:24:dd:
f0:68:35:06:f2:f9:b7:07:89:cf:45:be:b7:d3:11:
90:85:5b:c1:41:b2:03:67:b2:bf:6e:4b:a3:a5:67:
c1:16:04:d9:64:e0:77:cb:a5:c0:fc:96:73:04:d8:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:8F:50:34:55:F2:36:AB:40:5D:A6:5A:89:9A:37:BF:CC:11:A9
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:e7:c2:c9:34:73:a4:26:95:66:9d:e7:f3:6b:33:d9:9f:
47:c6:47:84:61:30:3c:87:af:f7:23:2c:18:24:85:02:c0:c3:
8e:a1:ba:04:47:fb:37:28:4c:56:5f:1f:84:85:5b:95:10:5f:
8c:b5:44:7b:a9:da:51:4c:0a:5b:fa:c3:a7:0d:d0:03:17:49:
56:63:14:fa:46:dc:5a:40:9e:91:4e:c5:71:3b:17:89:4b:b7:
90:38:7f:de:dd:97:31:da:06:c8:3e:9b:32:c9:d7:da:e0:e8:
f5:ae:64:5b:7b:55:2e:0b:68:44:d1:03:c0:fe:62:de:86:5e:
de:13:3e:fa:57:36:33:fc:47:75:9f:32:a9:ed:bf:0d:71:55:
9b:e1:76:a7:61:ab:d6:49:6b:ae:b1:24:b1:39:0f:54:83:db:
58:02:2a:63:0e:53:24:fd:44:de:09:68:60:eb:0c:a1:2a:72:
b8:39:b7:ec:24:54:27:2d:84:4d:2d:b3:05:a1:30:0d:5d:e9:
bf:bd:bf:bf:f1:79:89:53:2f:3e:0d:42:23:5a:61:07:27:fc:
b0:36:a1:9f:d3:90:75:9c:78:79:e0:93:90:d6:7e:e6:0e:40:
74:20:c8:0e:2a:41:35:31:b5:64:a4:e0:dd:38:99:14:57:5b:
59:e4:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client