Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: pRITjpmZgVBkUSm94hlcWwGTEMGhzJ6AUWK85tCsD6w=
Subject key identifier: F8:18:02:23:69:AD:BA:84:73:0C:5E:C9:0F:AF:0A:CE:BC:08:DA:45
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019A72CA370A172F6849F272D3E7B8A5BC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 14DE
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: V86UJA1O-8HYQT54CIctp1oCO8c.roa (hash: J5EsS3YJMQEhACG+1Y3yRobs5dYSCmigi0dhNvrKc7I=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: ZJ/ydCwmG5DbYfl1268D8GReFZQeeJ1MXfvQK+GGF2M=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:37:0a:17:2f:68:49:f2:72:d3:e7:b8:a5:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=f818022369adba84730c5ec90faf0acebc08da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:e1:32:79:52:16:03:41:13:81:52:c2:93:
1f:cd:eb:4c:75:b8:0c:cb:12:18:d8:6e:9d:0f:f7:
f8:90:d3:bc:8f:5d:d6:42:52:55:8f:99:5d:3e:0a:
7f:75:9d:a9:f9:1e:05:44:87:20:fd:1d:e4:4d:d4:
fd:e8:c0:4a:e6:3a:b0:e5:76:a2:76:85:7d:a2:68:
23:03:4b:f8:62:9a:af:f9:8b:a2:6a:31:d6:5f:e2:
1d:ea:a5:97:c0:c0:c3:5d:47:d4:14:f9:9e:5b:63:
ab:f8:a0:ad:75:2e:6d:4b:b3:bb:a0:1f:4a:45:74:
97:fc:5d:4c:a1:4a:8f:c2:34:77:04:c7:65:6b:54:
6a:b4:3a:a7:b4:53:78:22:6a:9e:5c:f5:ba:c1:97:
e0:29:f1:ef:8d:ac:ad:c5:73:c3:62:af:74:a0:13:
a7:b2:9f:cc:de:b9:e0:98:81:1c:a0:df:80:cf:58:
a4:05:c9:d8:b1:cc:31:89:bf:db:de:72:ae:51:fa:
82:4a:3a:53:11:f8:84:8a:bf:14:4c:f2:55:c9:97:
46:03:ec:3d:da:19:81:8a:bf:d5:54:ca:bd:11:1a:
a0:72:11:73:04:4d:91:f0:3c:df:de:59:17:1b:e2:
2e:98:56:9a:75:f4:7c:9a:61:a1:ee:f2:a0:27:f0:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:02:23:69:AD:BA:84:73:0C:5E:C9:0F:AF:0A:CE:BC:08:DA:45
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:5d:a5:0e:1d:ed:c2:3e:71:02:47:b9:d2:1d:5d:56:1e:
c6:21:ba:1f:49:c0:ca:67:0d:de:3d:d7:66:e6:65:db:e8:49:
90:d5:ab:bd:25:8d:af:af:95:60:93:07:28:d6:08:b3:1e:98:
4b:d7:42:95:5e:ce:07:e9:39:27:64:2e:e6:93:7b:22:90:c7:
26:e9:b5:a1:21:6d:61:c6:db:f2:c8:4a:f5:b0:f5:a1:df:e9:
ad:cb:df:18:91:23:01:9d:f6:a4:e4:78:f0:a2:fa:1c:ec:62:
b6:c3:6b:fb:fa:f8:d5:d1:bb:7e:34:03:05:a3:8f:a8:6a:ce:
c1:61:45:cf:81:25:c2:ba:3c:ee:f2:91:7a:e0:3e:da:4c:c2:
e2:ff:d9:7e:e8:ac:14:cb:f3:1e:cc:f7:ca:25:91:b1:d7:cc:
d5:d8:bf:db:9c:87:b5:06:4f:47:3e:29:42:f8:1d:b6:c5:12:
35:7a:03:cd:6f:d0:ef:e9:9e:51:d5:75:98:c6:8f:42:b0:7e:
f8:e3:59:b9:d7:f6:96:c3:0f:67:70:20:f8:9c:1a:9c:5f:0c:
db:90:a8:1e:6c:f9:96:36:aa:9b:c3:12:6a:13:f4:6c:a0:37:
01:68:9b:bd:16:eb:db:47:2c:b8:ff:e3:ed:3d:70:a7:85:97:
69:ec:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:25 2025 by rpki-client