Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier: MXf8tUWCK9bNyfO39n2aBxE78BpoFalZVMBsSfCEx3g=
Subject key identifier: 56:C7:18:5F:3A:F5:13:35:7C:4B:16:77:B4:76:35:4B:61:44:6A:AA
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 019A71EEA6EA18B7FB584948BD70C5873004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number: 132C
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: s9Tkkiy3+D+my7V3pOpobBF2p/SQI6yQbk0IwYVAIP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a6:ea:18:b7:fb:58:49:48:bd:70:c5:87:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=56c7185f3af513357c4b1677b476354b61446aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:2e:8b:b5:2b:b1:e0:3d:33:15:20:8b:0d:
a6:bb:26:a6:4e:87:97:0b:98:7d:78:f0:50:b8:01:
25:8d:6b:c1:11:0d:0a:bf:ac:ca:7b:15:d3:50:f4:
33:d2:68:4a:c5:ae:3a:8c:e4:f7:6d:b6:e9:90:e7:
c2:b9:37:31:a9:cd:dc:bb:43:68:fc:3f:27:fb:03:
6a:86:16:a1:a9:44:93:cf:7b:4b:6b:06:ca:93:ac:
55:a9:e3:7e:f8:fe:90:d2:f6:c2:8e:0a:02:f8:ff:
10:84:f0:ef:b7:fd:ab:9a:b0:7e:54:ce:5f:91:ab:
f0:59:8d:65:2a:0a:9c:b5:ea:72:cf:49:2c:f7:9f:
fb:ab:6b:83:46:b4:4d:7d:35:ef:a5:93:9a:9c:42:
e1:77:00:20:0a:19:b1:d2:b4:06:1b:63:55:a7:e7:
5d:6f:f1:5a:38:2c:f9:06:1a:77:f1:76:91:62:86:
98:21:02:49:b4:84:68:cc:b8:65:93:31:1e:89:1c:
fd:f5:13:4c:10:a4:58:62:2b:f0:41:86:72:6e:cc:
6e:56:bd:71:db:0f:dc:c8:2b:6c:e4:31:0b:64:e2:
df:0f:98:ce:ce:a8:0e:21:c2:cf:78:17:91:d4:5f:
57:2c:df:e5:5a:5f:2e:82:1e:28:f4:9a:5e:50:ca:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:18:5F:3A:F5:13:35:7C:4B:16:77:B4:76:35:4B:61:44:6A:AA
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:68:8d:45:5a:7d:58:04:c6:72:1e:99:f2:16:27:76:ff:
c0:72:3b:98:bd:33:08:e7:a2:35:cd:63:1f:80:a7:44:c7:84:
d3:d0:a8:ff:2d:95:2c:ef:ae:9c:c4:a9:4a:18:e0:2a:45:c0:
aa:bf:4c:23:83:18:8e:e7:54:a2:63:8f:2d:0e:39:a6:d6:13:
50:ce:1d:d3:9e:4e:0e:8f:e6:ef:09:dc:54:15:1a:bd:33:32:
13:bf:f4:40:26:d0:3d:49:00:6e:ac:01:0d:0f:75:f8:55:cc:
3a:55:f7:7f:9f:eb:d5:c4:cf:2a:2a:05:e9:e9:12:b9:8d:f7:
b3:08:b4:4d:07:37:13:9f:56:a5:9e:b8:d1:ab:7d:52:2d:e2:
0f:52:d0:66:f7:8f:9d:7c:8b:ef:a4:a1:c8:7d:88:88:71:94:
77:8a:9c:67:d2:f9:5e:87:00:60:c9:8a:5c:ab:04:2f:7f:0c:
fa:00:20:f2:50:61:41:98:77:35:b6:96:1e:1e:0f:63:61:2a:
02:11:0f:85:8a:ae:2f:08:4b:55:b6:59:c6:a9:e3:4e:66:85:
fb:4c:e2:9b:8a:55:fa:4b:c1:a3:e0:fd:6f:74:b8:48:93:9a:
00:fc:4d:88:f0:73:1e:c2:bc:3f:50:0a:c8:8a:dc:01:f1:12:
fb:75:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:37 2025 by rpki-client