Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: s1tcxNaPodgN7ENH/Lt7Tq2CSx7rIEGgXe7ptkrQw4c=
Subject key identifier: AE:ED:0D:B9:A5:23:D1:A9:ED:F1:A3:65:F3:AF:1A:F3:39:F1:1A:62
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019A183CC307DB8C8D88977BDC270E261A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 10F2
Signing time: Fri 24 Oct 2025 22:00:26 +0000
Manifest this update: Fri 24 Oct 2025 22:00:26 +0000
Manifest next update: Sat 25 Oct 2025 22:00:26 +0000
Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=)
2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=)
3: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: O0wi7FGHXBQRmQ/BpEs1jazi8+IJYbYDVIONSfsukIU=)
4: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=)
5: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=)
6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=)
7: rz4N95CrmRgEO1zjysAon4yFKAA.roa (hash: saVZv6bcY+zwNzfOK+c09gEbL5ZQ6JMTaAgizPOYSxA=)
8: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3c:c3:07:db:8c:8d:88:97:7b:dc:27:0e:26:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 24 22:00:26 2025 GMT
Not After : Oct 25 22:00:26 2025 GMT
Subject: CN=aeed0db9a523d1a9edf1a365f3af1af339f11a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:b5:28:76:ea:a0:d7:9f:da:91:e9:94:34:
c1:9a:b3:19:11:77:ab:27:36:b4:53:d1:38:6b:34:
90:e3:e5:e1:e5:81:e9:90:7a:7a:f2:96:01:94:c1:
41:d8:bb:56:b8:cb:9e:1c:5f:7c:d4:9f:66:80:90:
e2:ca:b9:55:d2:82:f2:d5:97:ee:e3:e6:04:24:d9:
ff:28:96:19:10:00:9f:93:8d:50:7c:0f:8c:c1:2c:
c1:64:21:f9:4f:38:90:4d:a1:49:c9:aa:e6:30:7f:
7d:1e:2e:13:da:71:96:40:39:c1:1a:e6:2b:d5:ee:
cf:49:21:f7:dd:7e:a9:35:27:22:dc:e9:63:52:a1:
d8:55:27:62:d4:9e:8e:89:f7:21:0f:45:23:89:ea:
a5:b3:92:59:0f:39:64:5f:ee:b8:dc:81:e0:4f:39:
ba:66:38:09:5d:ce:fa:7b:58:d9:2c:2f:1e:3b:9a:
b4:d4:c0:11:02:d5:bc:a7:f3:09:bf:8e:76:6e:cd:
1e:27:e8:bd:2c:d0:76:88:b2:61:30:b7:7d:97:72:
7d:5d:91:b1:bb:d0:d2:26:f6:a5:98:ff:f6:f7:1a:
a3:06:2f:4a:32:d8:8d:dd:f2:92:73:b8:8e:2d:e8:
c8:5e:ab:a3:56:c1:93:49:1a:fb:75:95:08:ea:17:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:0D:B9:A5:23:D1:A9:ED:F1:A3:65:F3:AF:1A:F3:39:F1:1A:62
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ba:5c:86:d0:bc:9b:44:83:f1:f8:cf:9d:db:f5:25:f5:c5:
98:07:39:9b:41:d8:a6:8e:48:b0:f3:31:87:13:4e:81:8f:f0:
84:c5:25:fc:ca:7b:c5:3e:c8:32:ba:1b:a7:74:c8:04:f0:bb:
00:09:d4:42:ad:0d:5a:0d:c1:51:9e:2f:95:1b:aa:dd:b4:fe:
12:50:6c:bc:9a:55:db:e7:7f:34:bf:e8:ff:62:d0:cd:6a:dc:
53:8e:0c:4f:46:74:f7:2a:33:46:e3:01:b5:bf:8b:98:ae:01:
e7:80:a6:e4:9d:6f:a0:1e:6d:1c:6a:1c:66:4a:02:8f:c1:34:
f4:92:06:f5:dd:3b:42:e2:62:89:8f:30:4a:66:f2:2c:35:a6:
13:a9:30:0f:c8:b3:60:93:6a:ce:d5:dd:db:3a:c9:b3:db:19:
0c:ba:7b:24:ed:e2:ad:9c:68:54:0a:2f:5e:5c:ec:85:a7:50:
f7:f0:01:9b:91:8e:70:86:12:45:65:30:d9:5d:2c:be:ee:20:
00:ea:c7:e9:30:6e:7d:38:4c:4c:34:84:2d:e5:3e:7b:7c:5f:
39:8d:97:dc:11:86:99:ae:29:62:c5:72:54:fc:00:13:88:86:
9d:fb:e0:27:ef:33:37:5e:63:27:03:27:58:35:17:f0:ed:7b:
fe:98:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:47:04 2025 by rpki-client