Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: Z8XGuY/iphF8nQ1DoXelH1GggLgGay778QbHpDYuPQk=
Subject key identifier: F1:2C:B3:61:47:BF:0A:1F:F7:19:7A:26:BE:08:92:21:9A:EA:5D:5E
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019A72264E7A7927BF50987C468F0078F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 0831
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: CVc9katM83e7BZSpljU11vKnzhuE26lCTID8aW6Xshg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:7a:79:27:bf:50:98:7c:46:8f:00:78:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=f12cb36147bf0a1ff7197a26be0892219aea5d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:eb:22:2e:1f:56:7b:64:2a:19:50:f3:b8:
45:93:b2:b5:61:bf:40:f8:aa:49:c6:f3:fd:ae:a2:
23:a8:5b:1f:be:d3:75:e3:e8:9a:56:08:f8:a6:b2:
ef:76:67:37:76:d9:4d:b8:46:a9:cb:9b:ef:5e:14:
58:3c:4f:35:9f:29:5d:a5:34:54:c8:ae:0e:0c:5c:
77:87:3f:b4:dc:ba:e1:b2:76:1f:bc:c3:b3:0c:cc:
bb:b5:fa:88:1f:9f:f1:11:93:1e:66:26:cf:bb:2b:
97:05:c4:10:26:58:89:1c:2e:88:b6:d6:e1:24:6f:
76:15:72:7e:1d:16:25:ef:46:1f:8f:68:4e:57:5d:
96:b0:78:51:c1:98:12:59:2c:2b:a7:9a:5d:bf:15:
6f:25:7c:98:fe:1e:ab:93:f6:86:57:c4:30:a7:58:
c5:7e:93:95:6d:21:f7:6f:29:d6:ae:d7:44:ef:1f:
d0:8f:ae:da:3c:d5:46:5c:10:61:8e:1c:39:87:05:
0a:04:1c:ca:23:49:ef:f7:51:78:66:07:e7:c0:c1:
84:be:b5:ec:7e:9c:0e:2f:17:ab:a7:88:30:0d:bf:
8e:f9:9f:63:a9:fd:9d:8e:71:78:54:77:b3:fe:d5:
88:9a:9f:4d:8c:78:a4:d1:48:06:1e:ac:d4:f6:20:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:B3:61:47:BF:0A:1F:F7:19:7A:26:BE:08:92:21:9A:EA:5D:5E
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:ef:c6:1a:96:8f:0e:01:7e:5b:b8:11:ee:d6:fb:29:23:
af:bd:49:11:ea:fa:32:24:d4:79:66:f6:4a:24:5a:d7:0e:83:
d5:87:ee:b6:e5:83:4a:f5:0f:87:50:9a:43:b0:c9:88:da:08:
2a:5c:95:5f:f3:57:fa:68:e5:df:c2:eb:49:28:1b:23:fd:69:
82:da:e7:b3:d5:82:4a:db:a3:39:ea:cc:a5:d0:ec:50:75:2f:
fe:79:d5:2f:3c:64:4c:7e:f4:cc:a2:3b:87:f6:b9:8a:01:39:
e6:70:c2:02:1d:69:28:8c:7b:91:8d:0c:b2:20:2a:71:30:43:
2f:d0:0c:b5:c6:57:b4:2e:86:7d:a1:53:b4:21:2a:96:f2:be:
c5:dc:b2:fd:9d:a7:48:43:e9:02:32:1b:41:0d:7a:fe:8a:58:
f3:59:2d:5c:d4:f3:f2:54:e9:e4:7e:3e:76:a6:32:c4:fc:70:
46:25:9f:46:f7:90:3d:67:53:ec:08:ae:72:7b:73:54:1c:92:
3c:8a:82:0e:72:d1:7c:83:30:f4:45:52:80:e7:48:2d:46:d4:
77:56:08:f3:83:d7:22:2b:ca:65:42:9f:a1:75:19:6b:04:6c:
69:b6:69:a5:da:98:3a:21:15:d4:aa:58:f1:32:f2:40:8f:a6:
dd:1f:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client