Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: zNHeKevXsUfjzCalUKgMzG8/oorSZXsgRNbclmP6zV8=
Subject key identifier: 10:E2:AE:83:46:DA:0A:A5:A3:1E:BE:99:DD:8B:DF:EE:72:F6:7A:92
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019A72262686BBB8F2F9DA1FF0FA47472D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 08F8
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: ufzSROEv9H5Uv3DP9CmJlg4bNt6X1EW1q3yndqf2/Os=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:26:86:bb:b8:f2:f9:da:1f:f0:fa:47:47:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=10e2ae8346da0aa5a31ebe99dd8bdfee72f67a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:c7:0f:09:d9:16:70:f8:a7:76:c1:fa:af:
e7:2d:ce:bc:b3:a1:ff:0c:c2:d3:9d:98:5e:8c:e3:
30:f2:4e:80:ab:73:eb:7e:23:e9:21:c5:dd:f8:7c:
97:9c:c5:bd:55:2d:17:46:dd:f8:2a:14:57:0d:3b:
1e:27:6c:d2:ef:6b:09:99:3d:67:82:e1:e1:e7:31:
9b:63:e8:bb:55:4f:be:2a:b8:9a:08:da:a5:b0:52:
23:44:87:98:61:c9:ad:9e:14:ea:8a:c3:d3:bc:7d:
75:0a:12:a1:41:f9:61:58:5f:42:3e:49:d2:e9:ad:
b1:67:fb:fb:ae:fd:67:8f:37:84:d0:5a:c0:ab:e3:
4d:fb:51:4f:81:4b:78:3f:95:1d:35:d8:3c:47:7c:
5c:17:ee:71:0e:b1:6b:b0:27:69:0a:ab:65:25:fe:
c5:f0:c1:21:58:f6:b4:ea:85:86:d2:72:d9:ba:36:
e0:dc:27:e4:34:2b:7e:75:92:c3:c0:2d:6d:cf:33:
70:2f:08:b7:0f:b6:cd:3e:01:bd:34:f8:ea:32:a0:
88:26:f5:24:ac:2e:4d:93:5a:35:71:3d:95:6e:ab:
0a:f0:d1:bf:b1:27:31:dd:72:09:7b:ff:8e:7d:d5:
56:06:d7:60:a0:4a:b6:7e:03:63:ac:e2:e1:e5:08:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:AE:83:46:DA:0A:A5:A3:1E:BE:99:DD:8B:DF:EE:72:F6:7A:92
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:2a:b6:b6:a6:36:47:e6:c8:2a:fa:8c:39:77:e8:e0:5d:
5b:f5:b4:37:46:dd:42:1b:ba:e3:14:41:ee:06:4e:85:85:ca:
54:76:28:fb:c9:33:db:af:a2:60:a4:1a:49:5e:5b:59:13:09:
f0:dd:85:26:5a:5d:aa:5c:ba:53:d8:cd:b9:54:f2:e4:e2:d1:
ad:45:46:d3:bd:d1:5a:a2:e9:77:11:97:0a:11:14:80:f5:88:
20:27:bb:01:36:80:c9:93:a4:e3:a5:7b:9d:5c:d5:2e:83:47:
a3:1f:d4:cc:18:19:ed:1b:dd:35:10:9a:9e:27:90:88:16:51:
d9:fd:f1:c3:e2:3a:60:02:48:13:b2:8f:65:fe:98:06:07:d2:
4f:e6:04:00:7a:14:3d:08:52:94:75:19:90:85:eb:46:33:0b:
28:e0:89:57:5f:04:ff:7e:0d:ef:46:42:3e:5c:66:d4:97:10:
9e:a7:0b:10:97:61:5f:c8:c8:ae:1b:3f:52:a8:d9:2a:c0:6d:
f7:79:e9:6f:a5:d6:42:14:43:4c:23:38:35:1f:70:9c:78:16:
67:df:56:6d:08:bd:25:d0:1d:5f:68:5d:ac:23:af:33:d8:20:
79:e8:22:cb:47:7a:33:34:99:c1:21:d1:54:84:e6:f5:50:ef:
21:01:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client