Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: cmvE5IdJUoNecDF6guZ464dy+zWxUOXfJOxWlGNa2IM=
Subject key identifier: 4F:37:38:EB:DC:D8:21:E4:EA:14:A2:95:07:0A:3B:BA:60:B5:DC:CE
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019A7149B37B776B1DB7724263A9AEBAD9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0734
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: w8CGj+u3CKZAP0A/s2FCOgMtQszjtn3S7+IQqH/YRbM=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b3:7b:77:6b:1d:b7:72:42:63:a9:ae:ba:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=4f3738ebdcd821e4ea14a295070a3bba60b5dcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:8c:0d:ec:37:af:b3:77:d1:26:7c:37:eb:
5f:d3:ea:3e:e1:4b:81:4b:db:36:f2:b1:57:3c:92:
5a:91:b6:e1:08:de:73:28:51:de:16:16:5e:e0:d9:
2e:18:51:53:6b:35:42:22:3d:c8:c4:44:25:33:2a:
91:08:37:af:8a:97:ce:c4:d4:d9:2c:91:1a:33:88:
4a:7e:74:89:fd:5c:44:5f:a7:fd:d8:8a:9b:bd:50:
52:4f:7d:d4:c2:3c:06:66:a3:77:28:fc:d5:4c:8c:
96:ac:6b:42:9e:10:bd:c9:b1:3e:69:b4:c5:b6:1f:
82:08:d1:27:a8:4d:25:bb:e8:c9:0f:b9:82:50:ae:
12:f7:cc:8e:31:ce:53:f0:76:ad:4c:03:14:a4:99:
d2:b9:4b:46:88:ab:7c:7b:5b:d6:40:24:a6:61:d1:
57:93:95:ab:bd:08:bf:0e:c8:06:98:e7:2a:b2:10:
fc:76:05:8e:66:d8:cf:57:e9:f4:8d:cd:47:1a:59:
0b:2c:c2:77:e1:35:84:84:d2:64:89:0e:e7:20:e7:
86:1f:ed:19:66:40:77:23:d8:7d:ca:1f:5e:20:95:
98:4c:d3:98:32:c8:5a:ef:0b:eb:90:d2:81:5e:69:
d9:6b:61:e5:52:72:68:8c:21:4f:73:82:69:6b:b2:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:38:EB:DC:D8:21:E4:EA:14:A2:95:07:0A:3B:BA:60:B5:DC:CE
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:93:b3:f9:25:ae:94:8e:f5:a6:e6:d9:67:a7:a6:26:e6:87:
17:11:5b:75:76:95:1b:11:f3:fc:98:80:2f:70:60:44:a3:c9:
68:98:69:76:ae:11:2b:3f:1f:b2:09:35:91:b8:04:94:56:bb:
fe:e4:e6:0d:3a:ae:fb:5c:bb:51:41:04:19:fd:11:13:a8:d4:
90:9b:26:3f:75:a7:19:60:8e:f9:65:e8:6e:9d:a5:a8:12:93:
56:4d:bd:7d:36:a5:ea:a7:49:6b:44:87:17:81:48:0c:da:81:
7f:38:de:ab:7d:d3:c6:a5:fd:22:25:b6:38:42:fb:f7:01:2b:
5a:39:b9:b9:7c:ac:d5:17:35:79:56:5f:6e:b7:77:fd:94:21:
72:79:37:f4:d9:01:f3:52:3b:ca:ee:d5:8c:e4:72:0b:08:3d:
ad:08:b0:9b:d4:5e:3c:ec:11:44:14:c1:f8:7b:77:74:33:a5:
4b:b9:b8:9b:75:bf:2d:87:a2:b3:91:24:f3:0c:0f:a8:21:f7:
4e:f7:f1:40:d2:cc:4c:7e:81:e0:61:b0:86:5c:86:ed:08:3e:
0e:87:f2:82:05:fa:19:f0:68:2f:fa:06:da:6d:29:63:d5:35:
f2:90:31:8d:f8:23:71:e1:65:b0:3b:39:39:10:b5:0d:b9:b6:
e7:d3:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:14 2025 by rpki-client