Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: PuPhI8+9fvIHh932NVbU69vUo8GZ7aI4Mn8oo+J1e5c=
Subject key identifier: 5F:32:69:49:05:B5:8F:FF:68:C1:9C:8F:EB:65:A7:55:72:AB:96:8A
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 019A71EEE677F8AE534A9E949E9E1EDB8083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: nyP7QGVGBSb2rFnzJS3wAoDR3nzsTlkbB9oJxnju5IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:77:f8:ae:53:4a:9e:94:9e:9e:1e:db:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=5f32694905b58fff68c19c8feb65a75572ab968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:bc:2d:e1:4b:6e:7d:de:c2:2f:ee:6a:a6:
26:4b:2b:b1:cc:57:b5:62:68:b1:3e:fc:e4:36:e8:
61:b1:ee:c9:93:e6:36:35:d1:12:74:5c:ff:15:e8:
d7:81:99:a1:53:45:7e:f5:35:b7:59:1c:51:fc:1b:
86:f5:35:19:90:e2:a7:87:c7:aa:01:c7:00:32:3d:
8b:a7:f1:96:93:9c:98:07:d9:35:dc:fe:98:68:fc:
23:b5:e5:bd:c7:9b:a5:55:cf:68:fe:9c:71:af:12:
66:81:d2:68:82:07:5a:27:a1:b4:60:ae:b6:bf:8b:
6f:68:bd:45:0a:6e:de:fe:b4:b7:cb:00:eb:5f:34:
b4:0e:84:ba:2c:b9:c5:ef:69:3a:af:ab:9a:0c:06:
41:aa:ef:96:34:76:bc:23:54:19:65:11:ef:bc:13:
e1:ba:90:92:d3:d6:46:87:f2:1b:ad:95:27:84:21:
84:5f:63:7c:67:64:07:e6:90:2d:c4:be:2b:39:79:
f5:d3:7e:64:b6:74:d3:74:e1:2c:e0:27:88:f6:8a:
5c:8a:0d:79:50:74:96:86:a5:dd:3d:05:2b:9f:a1:
35:c9:a2:ed:18:fb:b2:a0:af:22:a6:e7:92:b2:ea:
05:22:65:74:da:06:80:16:07:88:cd:df:fe:0a:73:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:69:49:05:B5:8F:FF:68:C1:9C:8F:EB:65:A7:55:72:AB:96:8A
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:3c:e3:20:04:4a:1f:32:4c:df:b5:20:57:05:0f:04:07:
99:fb:c5:f7:10:66:80:ba:52:f9:17:98:a1:62:ef:6f:ec:01:
b9:63:38:76:f1:12:3c:fa:2e:7c:9c:cf:d9:0a:32:c3:87:09:
8a:36:3b:7e:c5:af:0f:ba:26:a4:59:db:eb:11:7b:97:77:b5:
a4:b0:c1:2b:d9:a2:eb:ea:a6:22:df:c5:7e:44:6b:00:8a:52:
9c:62:61:53:00:ab:10:d6:81:50:78:45:e3:c6:19:33:d6:75:
31:49:ba:87:56:b0:d2:56:08:ba:12:fe:ec:2d:a3:07:10:5f:
f7:1f:9b:d8:3a:8d:61:a0:c3:69:e6:07:e0:da:3c:1d:27:cc:
d1:17:ac:e9:92:7a:1d:b7:86:28:76:3a:47:82:ea:e1:65:23:
fa:50:f4:2b:06:76:90:66:95:18:63:e4:f4:6b:d3:a7:e6:95:
6c:d3:20:87:df:dc:4a:9a:cf:9c:3b:52:f8:f9:d2:30:c1:59:
f6:48:01:aa:b0:59:1d:61:b6:f8:77:d1:3c:08:79:72:25:69:
b2:2a:79:f1:6b:b2:12:15:93:16:20:87:ae:4a:68:aa:c7:b8:
8e:df:a9:20:3b:01:9f:48:2d:39:8e:11:b2:e1:c5:94:ec:d2:
29:01:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:15 2025 by rpki-client