Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: T4OsX3RIcpam8sxK0B7oZMyrGRVdZA2BKuXkwXA3U4A=
Subject key identifier: A2:B6:48:97:43:6A:16:35:7A:BC:AE:EC:5D:11:24:18:EB:0E:72:E7
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019A078159FA9B485C6FA4977C84F76DF696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 10EB
Signing time: Tue 21 Oct 2025 16:01:48 +0000
Manifest this update: Tue 21 Oct 2025 16:01:48 +0000
Manifest next update: Wed 22 Oct 2025 16:01:48 +0000
Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: kZsK18dCz2CVgoNqHFoasJeJ6E5gaemMbpCvUEGoPA8=)
3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:59:fa:9b:48:5c:6f:a4:97:7c:84:f7:6d:f6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Oct 21 16:01:48 2025 GMT
Not After : Oct 22 16:01:48 2025 GMT
Subject: CN=a2b64897436a16357abcaeec5d112418eb0e72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:28:9e:3e:30:08:bb:f6:69:6a:01:7a:ea:30:
f9:ec:5a:c3:0f:46:0d:e2:36:81:d1:9d:d4:79:2e:
ef:1b:a8:ca:0c:8b:48:51:ce:b9:c0:74:06:2a:e1:
8f:cc:cc:13:ea:e8:0e:68:6c:19:de:fc:5c:ed:9a:
aa:6a:c0:2a:d7:7f:bd:42:70:a8:ae:e4:29:e4:6c:
d0:ee:d7:a8:fd:7d:54:06:ed:6f:ad:23:da:30:72:
2b:85:e3:05:52:0e:bc:13:22:11:60:62:68:68:26:
8d:5f:39:44:b7:d8:19:1f:81:d8:60:7e:36:71:a7:
16:4a:6e:af:62:a8:57:76:e2:b0:9c:bd:d6:de:af:
32:a3:a8:8b:16:ec:19:9c:ba:cf:02:2c:43:d7:78:
47:85:37:2c:05:c6:34:03:02:c5:2e:97:b4:e9:dc:
fa:53:cd:a3:e1:d2:47:7a:cf:d1:73:76:7c:70:1b:
42:09:d7:e5:c5:3a:19:b0:09:d6:ae:05:1e:27:7b:
c5:f7:f7:d2:60:ec:20:59:8b:b3:97:89:3a:67:48:
91:71:4b:fa:f4:69:cf:bd:8f:b7:76:16:40:38:55:
81:8b:cf:ec:ae:29:a3:20:39:06:d6:fe:ba:db:27:
65:04:df:48:57:3c:2b:90:76:24:38:e0:87:22:8b:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B6:48:97:43:6A:16:35:7A:BC:AE:EC:5D:11:24:18:EB:0E:72:E7
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:90:d9:3e:4d:4d:2a:57:74:4d:e4:c1:fd:00:f5:71:9d:f5:
eb:e2:ae:91:87:35:6d:3c:04:a2:d8:f7:bb:e6:7a:b8:3b:98:
33:94:b6:92:43:99:41:d7:f4:db:3b:e7:6e:63:4d:24:a0:0b:
3a:e1:7b:3a:23:d3:a0:7f:fa:52:bc:a7:32:45:d1:e0:35:d4:
42:f8:bf:52:ce:65:85:64:35:ad:f0:be:de:1d:41:5b:45:cc:
1e:c7:07:5c:e8:ff:79:0f:e8:8c:00:14:34:fb:12:fa:b5:bf:
c2:3c:3e:55:88:9d:8f:ea:b1:ce:7b:cc:e4:13:41:86:21:2d:
98:eb:5b:de:45:10:0f:2c:af:a4:32:b3:47:7e:38:e7:6c:f8:
17:45:a3:42:09:d0:3e:d2:f1:92:2d:e2:1c:57:ef:0f:da:8d:
c8:f0:33:26:2c:14:ff:65:39:26:c8:91:0e:4c:2f:e6:35:21:
3c:cf:d2:f7:ab:ae:f5:2a:23:17:91:5e:ba:29:a0:9c:17:68:
42:24:81:c3:96:dd:7b:cc:2d:55:b2:13:3c:25:c3:31:04:8a:
3a:1c:4c:a2:fa:e4:86:42:9d:72:e8:59:48:60:e8:4d:ba:67:
f0:62:67:56:b9:88:77:81:6a:82:06:e8:6a:42:a6:52:f2:67:
51:4e:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:53:17 2025 by rpki-client