Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: k6yw8DrKnwcSE5MvJlUe40xiPRso3pDKIAaHjsoRX6I=
Subject key identifier: D5:F8:A5:5C:BB:82:B3:56:78:72:3D:F8:3D:7E:3B:4C:B6:E9:D2:D9
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 0199D5B89B11F5418000E9CCF7C04410E108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 040F
Signing time: Sun 12 Oct 2025 00:01:09 +0000
Manifest this update: Sun 12 Oct 2025 00:01:09 +0000
Manifest next update: Mon 13 Oct 2025 00:01:09 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: avrAwGx5KGvq1rpBhp4V7vFiq58GGVKpdUzqnfu0F/Y=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d5:b8:9b:11:f5:41:80:00:e9:cc:f7:c0:44:10:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Oct 12 00:01:09 2025 GMT
Not After : Oct 13 00:01:09 2025 GMT
Subject: CN=d5f8a55cbb82b35678723df83d7e3b4cb6e9d2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:58:26:62:ce:02:a0:0c:dc:16:91:c7:ca:
f9:1c:d9:79:aa:d0:aa:58:57:1a:7b:a5:57:1c:39:
60:84:9a:19:ce:c6:90:83:85:f1:bd:33:ae:7d:c5:
8c:a5:32:fe:35:74:da:cc:b6:e3:d5:0b:e1:06:0d:
45:88:56:0d:cc:b3:10:25:61:80:22:c9:b0:c4:97:
1a:60:3c:ce:3d:0e:08:48:14:83:fe:b6:62:c9:f7:
9b:b6:d8:16:b1:e2:fd:bf:d8:24:97:fb:8d:29:f3:
31:bc:3a:b3:c4:ae:9c:d5:c5:2e:43:f8:33:8b:13:
70:83:35:2e:16:ab:7e:7d:6c:ab:68:f6:63:28:52:
7b:6e:3c:b3:96:3b:d9:c6:e4:51:9d:cc:04:20:14:
c2:c8:a7:51:64:7f:5f:cd:fb:e3:e5:8b:ce:f3:0a:
0d:9a:20:a5:df:74:37:a2:6a:d5:c1:71:cb:f6:3b:
cf:2f:95:c1:ab:17:02:6f:54:f5:6a:04:72:3a:de:
c7:a5:e3:34:e7:da:ac:8f:73:c3:5f:74:f8:cb:e1:
f0:9c:03:5c:77:2b:09:1a:d9:1d:3f:5f:6f:bc:19:
7a:2e:8f:5d:2f:9b:c4:7b:7f:ac:a0:77:77:01:ba:
6f:39:e6:13:07:38:5d:8f:b0:c0:fb:06:1c:f6:c2:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:A5:5C:BB:82:B3:56:78:72:3D:F8:3D:7E:3B:4C:B6:E9:D2:D9
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:97:f5:62:88:3d:22:25:a4:d2:32:fe:9c:fc:c9:71:a5:
32:da:97:c7:d9:b7:97:b9:9e:c8:bb:05:22:8b:47:80:01:cd:
fc:e7:07:d8:41:70:ae:ab:d5:99:9e:14:f1:6f:3a:cb:8a:75:
dd:28:54:9e:c6:c0:d3:29:e7:03:5a:a1:2e:8b:dc:d4:4e:22:
41:ba:93:42:96:30:c0:f5:71:37:34:2a:7a:9a:03:a3:74:7d:
46:ba:05:61:76:b1:4b:c1:9b:3a:25:5e:6c:38:98:9f:8f:c9:
8e:84:dc:52:fc:5a:4e:ba:7c:34:68:94:5b:3e:1f:79:9e:61:
49:b7:0e:67:f3:0a:ba:7e:e1:55:ee:a9:66:fd:dd:d4:81:dc:
e8:11:fb:43:02:32:65:e1:d6:bf:ee:1a:45:fd:44:3d:e9:59:
36:a5:26:db:5d:2d:38:a2:0a:0c:a4:2f:8c:46:8b:b2:83:e7:
3d:78:e5:3c:1d:e0:86:de:27:34:9f:3b:e4:09:70:13:01:c2:
50:ab:61:81:04:bf:41:3a:96:6d:31:27:b4:c3:f7:31:07:0b:
9e:51:0a:ce:e9:24:05:3f:15:1e:a9:2a:b9:c6:b1:ac:4c:d2:
7e:1c:0d:8f:3e:5b:45:a0:5c:21:ee:44:88:86:3c:b6:0a:5e:
f0:05:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 12 04:18:16 2025 by rpki-client