Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: CVy+tEfInV0TnQ0ygJesQ5I6F9rW9kkHndoEHZV+co8=
Subject key identifier: 4F:C0:05:1C:93:3B:BC:42:5B:AA:03:EB:80:05:FD:09:CB:8F:1B:E2
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 019A72938257E8DA7C98D50A681E4D16471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: VnjAZXEV2IpEDwg3p4BnaouHiwY.roa (hash: +OjGTLOvqNCpLYSjRU9GeBSRZeFRlVpWW6Mj3HPVgqw=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: qWlMfdwZTgwZEwEogAodk9r8uL4TNjvxYJNCaWuy4Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:82:57:e8:da:7c:98:d5:0a:68:1e:4d:16:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=4fc0051c933bbc425baa03eb8005fd09cb8f1be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:aa:66:3c:d3:f0:ac:b6:71:0d:d5:db:6f:
fe:b5:20:69:51:54:cc:8a:64:d9:23:43:fb:5f:39:
de:22:03:2a:33:1b:4b:c9:f2:6a:bf:e9:f2:38:5a:
4b:5a:81:b3:9c:c4:32:b4:e7:1e:8d:3b:43:c2:52:
0c:60:38:e6:a1:04:fa:19:9c:2c:98:e1:69:08:89:
e3:eb:49:86:06:fe:05:8c:9a:8a:4e:7f:be:82:78:
bf:90:e5:1b:fc:3e:c6:58:a1:f6:43:b8:e6:a3:d6:
c7:0a:27:06:06:6f:f3:f2:b7:74:94:2e:14:5d:da:
c4:10:82:4c:1a:74:20:7f:f2:ee:1b:b3:1a:f6:60:
51:90:87:8b:ce:ab:ae:b4:d0:f5:79:04:17:82:60:
ca:96:3a:8a:da:3b:d1:a5:ed:55:00:39:8f:08:b7:
15:0e:46:b6:6f:d3:6f:5f:c1:d8:7a:4a:d0:b1:e5:
e8:01:2a:58:41:d2:d7:6f:ca:bb:ce:c5:dc:ce:82:
9b:2a:f4:3b:49:a2:58:31:c4:92:81:2c:ba:d7:2d:
8a:6e:26:f7:8c:9e:64:92:f2:51:5d:ea:4d:f7:f2:
a2:1e:7d:46:e6:d3:e0:08:91:40:97:15:d4:88:0d:
82:a8:9b:a3:c3:e8:37:09:cf:28:5e:d3:db:9b:9e:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:05:1C:93:3B:BC:42:5B:AA:03:EB:80:05:FD:09:CB:8F:1B:E2
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:fb:ed:60:8f:10:51:f3:49:87:03:93:f7:47:cb:33:a1:
19:dd:1d:aa:21:45:2e:86:3c:32:62:9e:b9:2b:18:94:25:a3:
f1:3b:d0:ab:15:b7:e3:cb:57:d0:4b:4f:55:38:64:bb:c2:7d:
9f:4b:3c:84:51:14:73:33:a0:e5:9a:e5:82:4e:37:7d:37:cd:
61:ec:f7:b3:52:b2:7e:fa:c0:a0:a9:48:07:71:8d:25:f4:4f:
c7:54:b7:03:b7:f1:01:3d:88:b8:ef:29:c7:71:24:e0:7d:4e:
54:69:d2:3b:88:24:e5:cf:fa:41:6c:41:f2:6f:bc:27:38:d1:
c2:04:eb:d3:12:39:fd:cb:7f:02:87:50:a6:83:b0:43:91:63:
9c:a2:6b:a2:a1:c7:20:bc:58:71:15:25:39:6a:54:b8:c2:02:
70:b6:61:7e:5b:af:bd:62:9c:68:d3:3a:74:35:54:fe:39:7c:
98:5d:7b:50:c8:67:d5:69:0a:ff:7e:1b:0b:70:a1:5f:84:6b:
03:bc:d4:c2:30:12:75:41:97:b3:10:4a:48:52:3d:34:d0:31:
96:6e:be:50:17:24:54:88:26:e6:ed:a4:07:ec:93:a5:a9:08:
6a:77:e7:3b:4a:3a:13:76:ef:13:55:fc:f4:b0:5a:15:8b:6c:
3a:ba:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:35 2025 by rpki-client