Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: mv19+GyBpcjfcrJFQbtyejMqAr9mxk4M8eODcdPauzo=
Subject key identifier: F4:C7:F3:1B:2F:B7:9D:61:58:3B:45:04:64:5C:E3:44:87:44:0D:C4
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019A2E20778D98648B87A868666BACCF8B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1706
Signing time: Wed 29 Oct 2025 04:01:10 +0000
Manifest this update: Wed 29 Oct 2025 04:01:10 +0000
Manifest next update: Thu 30 Oct 2025 04:01:10 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: B4TvOAqE+zXre9HDb4hH23iIZSeXedMQprKDtP9p50k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:77:8d:98:64:8b:87:a8:68:66:6b:ac:cf:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Oct 29 04:01:10 2025 GMT
Not After : Oct 30 04:01:10 2025 GMT
Subject: CN=f4c7f31b2fb79d61583b4504645ce34487440dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:70:3f:a3:65:89:36:94:ae:98:03:64:3d:
44:c4:6c:fb:75:16:47:c1:60:e1:eb:74:9d:39:1c:
43:34:05:8e:cd:d1:3e:d8:0a:ab:89:f3:2f:a7:12:
80:ee:1c:ab:31:da:0e:92:9c:59:34:49:e3:01:e0:
6c:6d:99:20:71:66:27:07:73:4c:01:5a:70:e3:b3:
06:c8:3c:1f:a7:4d:72:2b:8c:f7:11:34:5d:47:0e:
67:75:ee:dc:be:03:aa:84:8e:8b:b2:48:34:bb:6c:
72:4c:7b:ed:25:98:1e:7a:02:77:7f:4a:25:2a:50:
2f:a2:63:67:ff:ab:9c:19:e2:7e:13:2f:b5:32:be:
de:51:6c:a1:39:a2:9c:74:47:ac:e8:1e:7a:d5:17:
c6:0b:7a:b0:28:0e:37:17:34:08:6e:59:1f:83:3a:
3e:08:38:bb:47:1a:cd:49:0d:66:52:d5:aa:69:60:
24:56:68:91:e2:97:a3:01:22:17:b3:a2:b6:fb:66:
2b:e4:71:6c:91:23:ad:f9:46:aa:05:80:31:ff:0f:
dc:8b:36:0a:b2:96:b4:23:17:fb:d4:28:80:1d:45:
4c:df:33:d5:48:9e:3c:c7:cd:0a:d6:81:aa:34:82:
8e:68:e9:8b:94:78:28:58:76:2d:2f:2f:a5:e7:44:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:F3:1B:2F:B7:9D:61:58:3B:45:04:64:5C:E3:44:87:44:0D:C4
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ae:38:ed:5c:7e:93:b1:a5:ea:fc:ab:3e:aa:3b:88:fe:35:
0a:9e:19:1a:40:f2:4a:e8:76:af:a2:44:85:cc:2b:cf:27:43:
9f:68:c1:c5:68:f8:c2:a9:c6:a4:09:ce:ae:b7:e0:f8:95:94:
0e:18:95:b1:46:ee:3f:0f:15:d0:08:e5:d2:f6:0e:5b:b1:30:
3e:48:a7:8c:36:c4:fd:e3:f4:c8:ef:34:ee:34:0e:9a:52:00:
39:3c:02:65:55:3a:45:11:14:3c:ff:00:c8:d6:e8:33:33:b9:
9e:c0:a8:e7:8c:bd:f7:2a:70:0d:bb:0a:2c:46:25:31:be:16:
45:cb:79:d4:6f:64:26:32:b8:ae:be:4d:71:bc:1b:5f:db:49:
52:81:b0:ab:3d:4c:54:bc:7c:3f:da:43:3a:a0:db:99:2f:e7:
6f:be:e9:50:a0:ad:e6:09:4d:91:07:20:aa:15:7e:0f:fa:8f:
78:8e:b9:6b:4c:6f:03:d5:d6:42:ca:7e:5d:dd:73:20:8c:90:
bb:aa:37:a4:55:df:82:c4:b6:8d:68:8a:ad:80:cc:4e:73:95:
4e:5f:ab:ce:8e:d0:56:45:aa:e5:a2:91:4d:6b:71:b6:2b:3b:
39:22:24:1d:c5:49:9f:49:18:dc:59:77:13:2f:37:d2:81:63:
69:72:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:45:00 2025 by rpki-client