Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File: fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier: zzYbCcdqzF8yJ3lm1IBF4rPQ0qv3RgDtHB2aWxejWbU=
Subject key identifier: 4C:F4:98:FC:22:64:D6:97:52:B4:63:73:DF:CE:34:93:92:A3:F5:C3
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 019A725CF82AF4FB5488B5B451CB3D17300F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number: 115B
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=)
2: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=)
3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: 9WV9lEMRBwVncAZ1Kdws9wXcCDg7cCo+8Kkjp+GCPYE=)
4: lEhVQNOMvqw54edqH7zh3c7mW1U.roa (hash: nQoP405LztBAkFL0e8Rma4sgogpaQEPhwJTWJogq2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f8:2a:f4:fb:54:88:b5:b4:51:cb:3d:17:30:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=4cf498fc2264d69752b46373dfce349392a3f5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:05:6c:2b:63:4b:24:2e:b0:0c:1e:54:c1:
7b:49:ce:f5:5b:25:23:52:28:25:10:3d:8c:12:dc:
d6:fc:57:38:78:1b:a2:9e:4c:c9:d2:9a:da:41:9b:
4d:db:1e:84:ef:dd:fd:fb:97:1a:1e:1f:90:83:1e:
2b:4d:66:ce:52:66:c7:8d:1e:44:df:2d:7a:d5:fb:
72:6f:51:bb:6f:01:26:52:58:7a:c9:93:0a:3e:5b:
50:72:f9:94:4a:9b:55:07:fd:65:49:58:5a:f1:aa:
00:b6:e9:e9:7e:cd:dc:09:26:66:77:04:da:57:c5:
3f:eb:64:a4:09:82:b8:97:66:b2:f1:8f:ad:f4:82:
a9:29:b9:76:56:5a:4f:86:1c:1c:e1:00:73:4f:6d:
e5:38:87:08:e1:31:9b:e3:68:d4:e4:b2:3b:61:53:
0f:39:71:15:4b:54:b8:30:aa:bd:9b:8f:49:9c:e9:
59:87:c8:74:34:8d:38:f2:02:1f:c3:6a:b0:06:46:
47:c2:0b:61:33:a0:7a:41:bf:4a:f5:6b:50:42:80:
7f:fc:83:c9:b7:f5:74:c4:eb:6e:b1:34:15:0c:cb:
85:b5:f4:c1:bc:fa:ad:b6:fe:3b:eb:3f:f1:2e:85:
f8:9f:0e:a2:aa:14:b7:82:ab:fe:fa:e9:d0:f6:92:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:98:FC:22:64:D6:97:52:B4:63:73:DF:CE:34:93:92:A3:F5:C3
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:64:ba:c5:79:8e:7f:f7:ff:5e:20:8d:b3:82:1d:45:9d:
f9:55:2a:6c:d5:e4:6a:84:01:8d:5a:58:2e:be:c3:4a:44:c1:
29:25:6e:73:e5:ec:2e:78:bd:66:60:6a:f1:a1:d5:91:40:5c:
ba:0c:8a:45:37:4c:c7:6a:1e:c9:59:da:34:66:fc:49:63:5a:
1c:a9:cd:ff:d7:fc:2f:6d:cc:8f:b6:93:25:5e:3b:5e:dd:ba:
54:97:72:04:b7:55:58:b6:d2:91:2a:02:64:7f:07:4e:f4:f5:
9d:76:cb:47:11:cf:5e:80:6a:4f:74:6c:97:37:f7:ca:f8:6e:
5a:dd:5d:26:82:d9:b4:10:35:7e:3e:46:8a:7e:cb:fc:af:0a:
7b:8f:40:d6:4d:ce:51:87:2d:6e:6a:2a:bb:f3:56:49:f6:f5:
d4:93:ae:17:8e:7b:30:b6:f3:35:fa:4e:df:6d:77:3b:0e:55:
66:cb:77:73:3f:1b:2d:9c:90:93:10:8e:0b:ea:39:ef:8a:ad:
ff:d3:de:63:86:69:49:2f:32:c6:86:ba:f3:c6:26:9d:9c:b7:
04:fb:6f:19:c4:2f:1d:62:ee:ee:86:1c:7b:19:5c:0e:9f:1d:
9c:c0:79:61:22:d7:a9:cd:ba:1d:ca:26:af:bb:ac:02:34:41:
1f:f5:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:34 2025 by rpki-client