Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: //DqV+3IRRSPRj2uogPJdGsA7NWozqKoaObeFMdO83U=
Subject key identifier: 0E:E8:9B:34:90:D0:D6:67:E3:49:B1:51:BC:74:79:6E:E6:1C:8A:0B
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 019A71B7F2BEB03780625011E8B0081E29A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0F39
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: N96nGEhoW7+dX2eSY6FEX3FABzPVMp3+qDGaP+I6vBo=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f2:be:b0:37:80:62:50:11:e8:b0:08:1e:29:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=0ee89b3490d0d667e349b151bc74796ee61c8a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:57:c9:40:9c:2c:34:7b:4a:e1:de:a0:3a:
9f:0f:38:fc:45:5a:5f:04:dd:a3:1a:be:85:52:3e:
46:b6:e2:2e:ad:0c:79:ea:62:f0:9b:b5:80:38:46:
26:67:e3:9e:d7:86:f8:f5:05:c5:30:cd:33:44:9f:
1f:08:d1:23:a3:d6:21:ae:57:6b:2f:6f:5c:74:da:
26:61:91:20:56:e9:bb:d1:19:0b:fb:c1:f3:fa:c3:
a7:5a:d6:c5:5b:f9:33:62:ac:92:2e:1b:4e:58:5a:
63:a2:2f:a4:bb:25:a6:13:16:32:7c:be:87:49:7d:
4c:19:b3:50:ca:66:50:52:c9:e2:33:81:d8:e7:3b:
12:31:96:0a:8c:a5:c6:c7:a1:c0:36:1e:e4:52:f3:
64:7d:1e:55:c7:22:eb:e4:92:6f:1b:17:bd:d5:cb:
c6:55:49:ba:6e:43:c1:98:45:ac:82:a4:34:6a:36:
4e:ae:a6:70:7d:fd:73:9e:17:79:58:58:77:4a:65:
47:cd:f9:a1:36:68:61:a2:98:9c:4e:1f:0e:d3:46:
91:64:60:81:7a:a4:e0:18:da:fd:cf:3b:85:e2:f6:
e5:47:0d:66:c9:59:5a:c9:6c:35:ea:f1:a6:f2:04:
12:6d:a1:c4:a4:86:1c:44:bd:ad:c9:4e:7d:6f:77:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:9B:34:90:D0:D6:67:E3:49:B1:51:BC:74:79:6E:E6:1C:8A:0B
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:28:f4:35:f8:1e:57:4e:ff:bb:36:12:a9:07:3c:c8:0c:
7a:6c:fa:72:69:d5:92:97:87:15:47:cf:78:1b:69:c8:b2:5f:
07:48:15:31:92:2f:ec:8e:b3:6e:b7:78:a0:52:2a:fb:84:24:
b9:7c:c6:66:07:f2:62:3f:4b:d0:47:9b:5c:75:32:19:e2:ba:
8c:2f:e8:6d:73:13:8c:ed:94:bd:39:bc:ff:96:98:77:96:0d:
35:c2:da:ca:97:7b:b4:63:eb:41:d4:d4:b7:3f:2d:40:d5:a0:
8d:ac:0a:21:47:af:9d:1a:6f:55:35:74:73:42:7d:60:a5:e9:
8c:94:96:b8:47:69:c8:df:ce:e2:bf:39:99:12:97:6c:a6:d3:
09:9e:43:0c:46:e9:38:26:62:42:25:b6:1a:b5:1b:25:9f:e6:
39:d1:ba:ed:4e:d7:c7:8e:c5:70:1a:9d:89:28:f0:95:8a:4d:
7a:5e:73:2b:aa:b1:77:69:fc:9c:b7:51:9d:2b:6d:d4:8a:0f:
ac:26:d9:7f:cb:e6:6b:6d:1e:2b:18:6e:33:6f:ed:7a:55:bf:
6b:fb:0d:ac:84:5a:e4:30:d0:9f:89:9b:d9:c2:ae:e3:64:ae:
02:3c:11:25:a4:a0:6b:80:11:95:d1:a3:39:d1:4f:40:0b:76:
ae:de:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:48 2025 by rpki-client