Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier: I5cJa9tceniLtQFXdG/j5AIGsx1esIBa8EXZtJgN9xI=
Subject key identifier: 63:4B:FC:FC:C7:43:D9:80:05:E0:CE:FD:40:BF:EF:86:94:B8:99:C7
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial: 019A706E4B07D4BA369A6174858733263FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number: 0DB1
Signing time: Tue 11 Nov 2025 01:01:07 +0000
Manifest this update: Tue 11 Nov 2025 01:01:07 +0000
Manifest next update: Wed 12 Nov 2025 01:01:07 +0000
Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: D8Gmu+NDG/+t8zTVU3sfdzWQEslkOv+cUKRR/EF45Pw=)
2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4b:07:d4:ba:36:9a:61:74:85:87:33:26:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
Validity
Not Before: Nov 11 01:01:07 2025 GMT
Not After : Nov 12 01:01:07 2025 GMT
Subject: CN=634bfcfcc743d98005e0cefd40bfef8694b899c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:b5:b6:ae:94:b5:19:a1:56:c3:ea:bb:1a:
a1:f9:19:d4:2a:e0:82:03:a7:bc:a7:ff:7b:ec:a4:
ea:e7:31:e8:14:3f:a1:0e:19:d8:95:df:e7:9f:01:
cd:5d:9e:25:6d:72:d9:d6:31:2c:a2:49:06:f8:4e:
e9:23:c5:cc:9b:65:7f:24:74:5e:af:02:7b:fe:f8:
0a:27:55:ca:2f:ff:da:11:b8:7f:8d:e2:a6:86:92:
4d:b8:20:7a:9c:87:68:94:09:91:54:fe:94:ae:93:
eb:6c:49:70:e4:49:36:17:2e:87:36:84:23:dc:e5:
61:f4:58:d2:c7:f7:8f:fe:4b:c7:38:a6:08:87:25:
42:ed:46:86:06:8c:7a:e6:d4:b5:97:82:6a:31:cf:
14:d5:69:0f:85:12:2a:af:c2:e3:d2:e1:10:0c:6d:
4e:df:71:68:cf:89:22:55:25:b3:7a:17:a4:2f:9f:
23:9c:ef:61:61:72:41:c9:d4:de:b0:ef:14:89:01:
31:17:cf:69:64:01:c3:a3:c8:50:47:f7:01:bc:cd:
e9:93:2e:1c:7d:d3:01:3d:c9:1e:05:10:88:30:e8:
8d:cc:ae:da:25:7f:cf:9d:95:5d:e8:a6:f1:3a:23:
0e:8f:f3:48:9a:a0:1f:e8:04:68:a7:c1:f7:53:7e:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:FC:FC:C7:43:D9:80:05:E0:CE:FD:40:BF:EF:86:94:B8:99:C7
X509v3 Authority Key Identifier:
keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:95:63:b0:35:29:57:17:af:b6:89:6f:e5:27:cc:15:11:95:
aa:fe:0f:de:fd:bf:45:62:b1:1c:c3:a9:8e:c1:dd:b0:a2:2d:
c8:dc:44:d5:aa:73:47:16:e4:d2:55:61:c9:63:a2:2a:af:10:
56:99:b0:fa:b2:1a:4f:4d:1c:d1:9a:79:02:31:bc:1a:7c:96:
5f:51:36:82:8f:7e:14:ba:5d:8d:73:95:46:1e:15:ea:24:01:
99:57:0d:72:c4:ce:79:dc:6a:6a:26:94:5c:c5:40:63:6d:fc:
b2:43:d5:1a:07:44:01:d1:4f:b7:b4:c7:b9:9a:a3:c9:14:c0:
9f:bc:08:88:fa:cb:ba:dd:98:d9:98:5a:b9:fd:eb:2f:b1:b4:
f3:aa:78:06:d6:16:a2:54:53:54:36:f5:cb:91:ff:10:b3:48:
11:c6:18:73:8d:18:4c:6b:09:ee:6e:98:9d:ac:b6:a7:8f:c8:
b2:a9:9c:20:b8:57:b7:0d:6b:07:f4:f5:c6:13:ea:b1:40:35:
fa:c4:8b:b8:c4:69:48:4a:a6:02:6b:62:5d:6b:f7:93:57:16:
a7:e5:bf:37:e9:b6:7f:41:1b:ca:b3:3d:b2:79:e0:ea:c0:7c:
ac:aa:4e:81:c3:ad:91:fa:ea:bf:45:f6:42:b7:64:b9:77:cc:
7e:61:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client