Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: Uc39q/3YomPm9dB4+C3doZOB7TIz30jMYFTCKNRwnEM=
Subject key identifier: 7D:1D:91:74:AB:E0:F4:50:55:C1:1D:C1:A4:BA:D3:88:21:00:1C:44
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 019A71B92DB0BB610BE3670F342F33691197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 13F3
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: uiRXegYFZaBlepnDdSqRgWLU7gzbgnqfry1Ikt1sOz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2d:b0:bb:61:0b:e3:67:0f:34:2f:33:69:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=7d1d9174abe0f45055c11dc1a4bad38821001c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:b9:02:c4:d8:ae:33:dd:72:2f:27:ad:e8:
39:51:5a:a7:54:41:06:27:04:1f:25:db:53:ec:04:
17:1e:3a:ee:56:1c:97:6e:4f:a9:54:1b:a7:58:e8:
84:c0:f0:45:6d:ff:93:df:2b:6e:11:81:50:93:a1:
b1:b5:6d:5d:6b:c5:33:a4:2a:a1:43:de:a1:36:e8:
02:e8:54:aa:b7:51:53:6a:e7:8e:40:25:0c:e3:c2:
53:80:9a:cc:fa:46:9b:44:07:85:a1:a0:56:8b:1b:
14:62:75:78:9e:12:8d:40:0d:d2:fe:a2:d2:d9:d4:
a9:b1:c2:eb:1b:e6:ac:47:79:a9:91:93:bf:60:9e:
30:c7:47:d6:30:c3:af:b1:c4:94:46:d5:20:d7:c3:
40:8a:ee:de:cf:cc:10:48:07:c0:46:47:89:27:43:
92:e8:dc:d5:94:fd:e6:5b:35:37:7c:04:24:68:fd:
fa:a7:22:6d:cc:18:ac:16:71:45:57:4e:cb:07:1b:
e2:ed:49:82:59:61:79:11:3f:c6:dd:2a:b8:7d:6e:
6b:24:f3:e8:24:c9:8f:a9:25:74:d7:37:7c:4a:ca:
9e:3c:e7:7d:a1:a8:9e:62:d5:c9:4a:6f:da:07:a5:
b5:25:ce:7d:90:cd:e8:88:4f:a3:9d:db:0a:be:83:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:91:74:AB:E0:F4:50:55:C1:1D:C1:A4:BA:D3:88:21:00:1C:44
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:c5:f0:0b:0b:9a:d4:5e:92:17:2f:74:ae:7f:af:4e:31:
5a:b7:da:a8:8b:43:48:66:e9:dd:99:70:09:dc:7f:cc:7b:61:
12:46:f4:e2:e5:2c:23:11:0c:54:d1:26:20:c7:8b:23:0a:25:
cb:4a:9c:25:38:b0:2c:54:04:63:4b:be:8a:bf:09:fc:1e:70:
06:68:b5:87:70:c6:36:6a:2d:29:49:58:b1:0f:f5:3c:88:6d:
7c:65:da:d3:d0:00:2c:9b:fa:c9:fd:7f:03:63:2c:66:fa:b5:
61:03:eb:6b:d6:e2:b0:d0:52:99:6b:e1:4f:6d:95:ed:f0:82:
df:7e:86:8f:12:36:3d:18:7f:81:e9:1f:7c:fe:45:70:17:fd:
0b:41:6d:ae:15:59:fd:67:71:a4:a2:fd:0d:b6:e2:65:27:4f:
7c:12:5e:e6:8e:12:f6:18:f8:8c:79:0f:82:64:61:b6:eb:87:
25:2a:28:31:de:98:22:71:66:e1:6a:4e:11:c6:10:9f:a7:a0:
a7:92:ed:02:e2:24:b6:22:3d:7f:28:f8:ad:56:bf:69:74:29:
4e:d9:43:a4:28:bf:9f:0b:94:6a:9e:15:e7:20:84:58:b2:ea:
26:f8:40:05:88:4f:c8:40:ae:dd:d4:8e:56:1d:99:5c:dc:07:
c2:13:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:59 2025 by rpki-client