Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier: FI2iYg28w/TbZe06sxAYuWtxMBiIYS7tqB3TSfStJqY=
Subject key identifier: FF:B2:63:C3:4C:4F:D4:90:0F:4C:46:36:18:E4:FE:2E:14:4C:00:C0
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial: 019A71133D2EA46CA82CC3154B8719E58482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number: 0A0B
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: jPiRgwXD7rTu6prAdgyemi09vNy1fyE2Mj9Zk7tFKQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3d:2e:a4:6c:a8:2c:c3:15:4b:87:19:e5:84:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=ffb263c34c4fd4900f4c463618e4fe2e144c00c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:fc:37:cd:f4:62:2c:d0:53:ad:ea:86:55:
7f:fb:30:ca:5c:66:95:7d:03:16:85:7a:56:41:0c:
26:f7:a5:22:9c:b8:34:be:08:79:a0:d2:67:22:f9:
8b:f6:4b:88:a8:e8:b4:7e:3f:8c:b2:8b:cf:f6:23:
ad:7d:99:b2:e6:87:bd:08:04:0f:e8:c4:3f:9f:77:
f6:0d:62:ce:2b:a0:bf:e1:1a:32:91:9e:b9:3b:3f:
d3:e3:e2:0a:9b:38:92:5d:81:89:e2:5e:fa:d1:a6:
5b:0e:ed:9e:0b:6c:9f:86:8e:e0:ed:5e:1b:1c:2d:
47:51:ff:33:d1:90:13:e2:89:8a:1b:c1:9b:c1:b8:
cf:f7:36:ba:71:69:93:bd:ce:0c:c4:0e:ca:00:eb:
d3:0d:a0:31:94:21:2f:bc:74:ac:27:44:28:ec:f9:
16:09:2f:cd:19:e1:6c:a0:10:12:af:66:30:82:ac:
99:ba:f1:bb:0d:8a:36:1b:00:a4:a0:24:92:4a:51:
37:26:12:06:cf:b4:81:6c:d0:dd:82:5c:cc:33:b0:
55:ae:3c:25:5a:5d:ca:e2:43:0b:5f:ad:0d:74:d0:
7b:93:7b:28:18:5e:7f:12:f1:72:ac:bd:ef:eb:b3:
45:bf:50:71:27:c3:2c:22:58:34:e8:28:8f:00:28:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:63:C3:4C:4F:D4:90:0F:4C:46:36:18:E4:FE:2E:14:4C:00:C0
X509v3 Authority Key Identifier:
keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:39:b8:b7:3f:3e:8b:55:c6:18:ac:bd:2d:7d:1e:ba:0f:87:
30:83:25:44:d9:da:7d:f1:98:6c:79:b9:bf:bd:3e:72:51:f7:
da:59:0b:d3:04:83:2a:82:9d:e3:af:ee:48:be:1c:b0:81:28:
45:e7:ea:66:77:2a:f7:00:d8:53:7f:9b:47:da:1c:99:11:b9:
f9:fd:3d:e2:54:2b:bf:87:d6:ce:6f:d4:97:40:8d:92:bd:79:
50:3a:09:f1:33:ba:1b:2f:dc:6e:c1:f1:39:3a:a8:94:5a:62:
89:6d:c3:14:62:7a:3a:13:02:a8:70:29:cc:9c:f4:68:9f:f1:
a1:2e:dc:db:d7:67:f2:c9:29:fc:88:66:ba:2b:51:5b:75:0a:
bd:b0:49:bc:01:41:28:54:9b:1c:4b:11:2d:66:af:97:0e:9e:
66:20:1f:60:53:95:ee:90:7c:1c:6e:8a:65:2a:f5:a7:36:2f:
dd:a8:b3:9f:35:58:93:74:4f:b6:a8:59:12:7c:35:b8:86:a1:
4b:5c:05:cb:d9:37:23:76:3d:e6:83:2b:7a:da:32:43:57:ed:
8e:5d:46:4b:7e:ec:70:5f:7b:dc:b4:6e:6a:b1:22:aa:47:db:
d1:36:1c:9e:6c:42:ea:6e:13:16:d6:f9:b1:73:c7:0d:a3:95:
8c:5b:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:02 2025 by rpki-client