Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: 6ceDbjARFNRVTnvNdYv6EZ4RdpW/P9xQlrMxq1jisco=
Subject key identifier: 2F:E5:8E:5D:BE:2E:17:CC:61:5D:3C:14:44:C0:25:7F:4D:AF:26:46
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 019A20D201C627893DA09C825981EB5F1421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 09AD
Signing time: Sun 26 Oct 2025 14:00:25 +0000
Manifest this update: Sun 26 Oct 2025 14:00:25 +0000
Manifest next update: Mon 27 Oct 2025 14:00:25 +0000
Files and hashes: 1: A8Ej05bPXSyJSutko6zMXi_LdTs.roa (hash: l1Np2vyuCibE5G3ZNC4CZuxMVOv5Q0qw24MUV/m5PcU=)
2: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: EZNADvd11zFrPUPSjdsb4wfkJg3pWv4WMYhrqxea0Cw=)
3: LrktV_MNLgMuzH072PMIh7VuEn4.roa (hash: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:01:c6:27:89:3d:a0:9c:82:59:81:eb:5f:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Oct 26 14:00:25 2025 GMT
Not After : Oct 27 14:00:25 2025 GMT
Subject: CN=2fe58e5dbe2e17cc615d3c1444c0257f4daf2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:73:60:e8:ac:c6:55:64:0c:d0:38:b5:4e:
0b:f3:c9:9c:f2:3b:0c:1d:df:46:fe:58:b6:90:c6:
ba:c2:d5:f6:4b:ed:7d:e6:1e:24:2a:46:39:06:ed:
69:40:88:de:e8:ed:cc:b5:9a:db:68:7c:18:4a:24:
c2:a2:e4:d7:be:a3:08:f3:b4:14:b0:fe:bc:f3:fa:
0a:67:7e:ad:70:75:60:6e:06:34:2c:b0:53:f2:c4:
d4:77:c0:43:2f:2c:69:a1:04:2f:4b:71:50:b3:d5:
96:c1:1f:32:fe:71:a0:44:bf:d9:41:f0:a3:48:18:
e6:55:1c:7b:a0:12:d9:a9:16:af:fd:66:15:3f:d7:
85:f5:c2:7a:08:ac:04:5c:22:a7:5f:29:e7:37:13:
61:74:00:8d:d6:0f:8b:c0:56:19:e8:ac:99:44:26:
de:0b:0f:ad:28:d3:43:c4:54:67:55:c8:43:ba:32:
4a:4b:ed:df:e8:85:e2:27:10:19:90:22:6b:d5:64:
4a:a0:cb:7f:3e:57:36:10:6c:c4:63:df:b1:d6:a9:
b8:3e:74:17:26:67:3c:e2:d0:30:7e:11:43:b2:3f:
ca:11:69:41:0d:0d:27:0f:21:d9:53:dc:8c:1c:9d:
94:08:e7:d4:c1:0c:3e:25:72:51:22:15:91:ac:88:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:8E:5D:BE:2E:17:CC:61:5D:3C:14:44:C0:25:7F:4D:AF:26:46
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:46:80:ef:57:b4:f1:92:57:6b:8f:54:94:50:b9:68:0a:9d:
a0:f3:26:bf:39:b6:c0:a1:74:dd:88:79:62:65:a7:30:bb:94:
ad:2d:58:e1:d2:bc:67:81:89:8c:2d:52:2e:1c:2a:9d:22:f9:
d5:75:14:7e:bb:6a:41:a0:73:f5:9d:67:44:1a:ad:a1:90:d9:
34:bc:73:74:bd:e4:57:72:16:79:0b:5f:8e:cf:98:1f:08:a2:
c8:6a:40:9e:f4:64:dc:88:00:61:6b:11:79:ef:23:63:2f:d4:
c0:85:37:18:02:fe:c6:c2:16:b0:30:1b:1d:85:9e:69:4d:ef:
2f:6b:cd:0b:d4:c2:c4:f9:3f:16:0c:99:1e:c9:c5:0b:ae:95:
b1:c7:b0:44:53:eb:fd:a4:87:3d:a2:fb:3a:14:ad:4d:20:f6:
e1:e5:73:4d:69:a0:62:9a:46:55:e0:aa:1d:19:f6:a4:46:b9:
9e:3b:7a:49:ea:87:dd:15:1e:bb:28:19:25:8c:c5:5d:1b:fe:
c2:9a:8b:45:43:75:8a:8d:9d:ca:c7:94:f3:78:22:a7:bf:81:
7f:f9:c7:d4:21:80:57:fd:86:ee:94:f7:ac:4c:80:1b:d5:16:
b8:38:79:c3:f5:20:9c:d9:cf:f1:f9:b5:72:80:39:2b:19:46:
3c:06:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:21:57 2025 by rpki-client