Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: /eYc+6gveFFkvX+fTmYm02d1JmSl4HsetPm+UteToUc=
Subject key identifier: A9:01:D6:A0:5C:0B:A7:BF:A6:96:50:70:52:10:64:2F:10:AC:30:1A
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 019A4DAA81D3952C495A848C2D79E206E3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:11 +0000
Manifest this update: Tue 04 Nov 2025 07:00:11 +0000
Manifest next update: Wed 05 Nov 2025 07:00:11 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: xNmCr7iMo97V//UgPmmODikBPh1eIR3LK6x4JkGtuc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:81:d3:95:2c:49:5a:84:8c:2d:79:e2:06:e3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Nov 4 07:00:11 2025 GMT
Not After : Nov 5 07:00:11 2025 GMT
Subject: CN=a901d6a05c0ba7bfa69650705210642f10ac301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:d0:35:16:fc:53:93:13:7d:4f:2a:60:0b:
16:f5:d8:da:a7:9d:8e:fe:ac:eb:29:9f:50:e7:5a:
34:5c:de:e6:66:44:bc:c8:45:b3:2d:c4:93:fe:a5:
23:11:ef:e7:0d:4e:26:ed:af:65:22:39:2b:4d:b6:
15:bb:ed:2d:7e:94:82:17:f1:e4:3d:46:01:f5:e1:
a0:f4:b5:1c:a0:a9:74:cf:a0:f3:40:5e:ad:73:37:
10:15:df:17:c5:cf:0b:9d:b7:ed:bc:8e:7d:6e:e9:
78:6e:6c:53:05:2f:5c:bb:9e:f9:87:00:82:22:6c:
62:59:3b:be:bb:d2:7e:87:79:49:d7:4a:08:b0:7c:
a7:4a:de:b7:9f:f8:19:38:83:64:36:93:e8:db:6d:
6e:df:dd:94:b7:0e:04:fb:7f:68:be:03:10:f7:c2:
82:e6:f5:62:96:ef:75:37:41:2a:fc:fe:2a:6a:2e:
60:83:f0:a5:e1:c2:9a:4d:d5:ee:cf:51:b9:cc:e9:
e6:73:5c:47:ee:7f:e8:0a:d7:ee:96:e9:a8:bf:7e:
13:f5:83:d1:2c:8b:63:c3:dc:be:63:72:f6:a8:10:
02:20:d3:17:54:e4:ca:84:fb:e8:a8:5c:ce:11:2a:
d4:b5:5c:f3:47:2e:cd:d3:0e:50:ab:d5:88:40:3a:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:D6:A0:5C:0B:A7:BF:A6:96:50:70:52:10:64:2F:10:AC:30:1A
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4e:7e:c2:74:2d:6a:21:34:ef:e3:ca:5c:a8:d2:6e:ed:0a:
60:2e:b9:4e:c0:29:88:c2:3d:a2:b1:e0:e9:cb:0e:6a:3e:b8:
3e:49:f6:d0:e4:fc:c7:e5:11:3e:38:d9:79:7b:a6:f3:27:83:
91:d2:36:d4:4e:e4:77:35:45:d9:09:56:bf:6a:fa:c6:0a:d1:
59:a2:57:ba:32:07:91:3c:74:33:04:52:c2:ff:99:2e:7b:43:
9d:89:4b:89:f0:8f:67:7f:38:e3:9a:28:fa:df:74:71:e2:f0:
d3:d8:49:a8:e7:67:80:05:b6:3a:0c:07:b9:b4:be:be:fa:db:
29:ff:ce:e6:6d:07:c0:93:0d:7e:bc:a6:1d:07:e9:97:fd:5b:
59:2f:88:fe:1c:1a:36:8c:e9:2b:1a:95:60:94:60:7c:d5:99:
8a:7a:8d:41:d2:2c:27:ba:34:9c:73:0d:56:49:4a:20:c3:55:
6d:ba:c6:d9:bd:da:84:4a:ea:94:59:17:8b:a6:87:29:f4:12:
12:1d:f7:e5:89:26:ef:15:12:46:fc:7e:7b:7b:bc:70:97:17:
6a:1f:07:ce:f2:75:c3:0e:ea:a0:c8:c3:ea:ea:9e:d0:cb:89:
db:b2:a3:78:0d:d8:db:59:42:d7:da:1b:51:26:5b:eb:32:82:
dc:99:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:47 2025 by rpki-client