Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: NgvwQLmssjpWkqpnH9B1les9z6j0dTsw7hhfBI6LdQU=
Subject key identifier: 8F:7E:BF:12:E6:83:10:DE:EA:DD:C7:65:FE:9D:9E:83:C2:4D:A9:86
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019A725CCF46ECD8F4BB6D959551645A8B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 1414
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: 1mDOmu/3Ma4YM7CHwhViAcTq7AeprGmM/zUWyx92z14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cf:46:ec:d8:f4:bb:6d:95:95:51:64:5a:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=8f7ebf12e68310deeaddc765fe9d9e83c24da986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:f3:89:9a:27:f2:92:21:3d:15:ef:45:f9:
6c:74:a7:d3:83:d1:1a:99:e5:ba:20:7d:b7:fe:5f:
35:57:1a:eb:c8:46:98:36:5f:ac:d6:0c:23:6e:0e:
8d:ed:82:07:fa:6e:f5:ca:13:bf:7f:86:5f:54:7e:
3f:65:0c:ff:5c:9a:c8:fa:b7:ae:cd:a7:c6:8c:ea:
08:8a:a2:5e:7f:74:59:ee:56:54:de:bf:b5:77:40:
11:e9:ce:4b:1a:ec:82:d0:fa:fd:de:7f:5c:ed:48:
07:d0:74:7c:e9:d0:99:40:eb:9b:14:df:6a:21:5e:
62:1d:39:6a:5a:25:29:bc:30:7e:92:62:c9:ad:f4:
01:b8:c0:c3:1b:19:f3:79:3d:19:e8:0e:45:f7:0f:
8e:34:ca:64:22:54:57:f9:80:65:df:ae:14:44:e5:
39:9d:82:98:e9:44:5e:29:19:5f:97:22:49:05:33:
de:79:eb:95:31:84:0e:98:aa:1f:ea:20:e7:92:64:
b5:55:f1:78:1a:4a:8f:3e:06:13:a6:16:ba:1f:0f:
22:d9:b8:61:e8:57:cf:08:8d:95:5d:ce:94:76:e4:
7a:5f:06:6e:44:e2:26:d5:38:19:64:58:0a:78:dd:
0e:ce:fa:60:a9:0e:2e:ed:5d:a9:44:c6:46:0f:28:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:BF:12:E6:83:10:DE:EA:DD:C7:65:FE:9D:9E:83:C2:4D:A9:86
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:74:3d:d6:4f:46:24:52:ce:a7:0a:0c:4a:80:73:07:a6:85:
23:64:a5:98:4a:1f:5a:8b:3b:5f:04:de:2e:ae:ac:f9:6a:fa:
f0:c1:2f:b9:39:75:56:fb:d3:66:42:7f:02:9c:4b:c0:41:c9:
f1:fe:81:4c:98:7b:2a:30:4a:6a:d5:95:77:8f:b1:1e:8c:08:
fa:e6:b1:32:b3:9f:de:65:dd:90:03:77:fe:1f:7f:01:1c:3f:
17:67:65:75:8b:ac:11:0f:0a:ba:04:93:12:d7:a2:e2:2e:05:
f9:37:0c:33:be:86:bc:21:a4:71:1f:58:cf:40:22:53:f3:d2:
bc:bd:84:cf:1c:34:57:89:1a:c3:2e:42:fd:f5:44:5a:8a:c1:
33:90:5c:74:77:56:5d:24:fa:12:7a:7f:bd:08:74:0f:ed:bc:
28:2c:c1:bc:e2:5b:09:8b:3d:70:c4:bd:a9:d0:2e:0b:d0:03:
6a:bd:57:49:16:79:cb:35:de:65:24:da:44:79:71:60:c0:1d:
b9:29:ee:27:af:5f:d3:91:a5:6b:86:5f:d1:2f:84:23:98:e2:
da:13:b8:f2:4f:c7:c1:3f:e8:73:a4:40:f8:41:3e:8d:26:38:
f5:ae:23:75:0b:82:88:8e:b4:16:d4:59:e3:3f:78:d9:56:10:
21:9d:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client