Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
File: F1rTPU9qTQU5wncOK0-7qU_PHx0.mft (raw, json)
Hash identifier: 2RaYMCS4dL1gIq9Z3VYhiVyb3ldPGXjhzrJgLSUPgOg=
Subject key identifier: 1F:5B:FF:1A:1F:E5:BF:E4:B3:A7:B1:BD:CC:D9:A8:8B:FE:2F:82:DA
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 019A7301731BB672B353AEE04C9F9239E10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
Manifest number: 0DB9
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: F1rTPU9qTQU5wncOK0-7qU_PHx0.crl (hash: djkU87TJmwIhcSTSFx/t5nxYQtejwz2FF/N5jo+aOCs=)
2: v2_TK4-REFwVL-mrNBvq6f4sDVk.roa (hash: yZE8bYF7utpoM00wO6cfNJ1eaodSy7TIyviaRMC6vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:73:1b:b6:72:b3:53:ae:e0:4c:9f:92:39:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=1f5bff1a1fe5bfe4b3a7b1bdccd9a88bfe2f82da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:f9:59:33:6e:67:38:5b:97:36:26:f0:20:
bf:ba:ee:9a:77:b1:0f:f9:1e:a6:b3:a4:3d:81:a2:
bb:49:a9:57:30:2a:64:2d:55:f3:8d:db:4a:31:5a:
83:70:1b:1b:92:38:04:ad:16:18:ad:13:43:27:47:
53:d4:7d:f7:91:13:9c:52:e4:fa:6a:5a:7e:17:13:
88:b1:9e:92:a9:c2:ea:d6:6b:b5:d1:02:c5:a3:57:
a9:7d:e6:36:0c:b0:52:05:8a:2f:fb:e6:93:0f:e7:
c7:b9:a7:c4:97:66:03:c9:7a:6d:66:95:a5:70:91:
c6:99:b5:df:b0:39:40:c2:46:7d:92:c6:61:e7:ef:
eb:31:f4:7c:54:c5:51:7e:ec:78:97:20:f0:0f:c9:
ec:5e:6b:76:9f:7e:c4:4f:05:1d:4e:0a:ed:8a:72:
08:e3:d8:54:b4:af:3b:7e:58:b9:3c:60:ab:5e:28:
56:12:dc:e0:a1:d2:d3:67:f7:18:c5:5d:77:89:b1:
17:19:42:a7:9c:b1:61:33:64:4a:c0:d4:4b:57:ba:
aa:b5:c3:ed:a3:c3:a9:86:42:35:74:e1:9a:38:c2:
f6:dd:2c:24:c8:d6:c7:ee:95:83:90:46:b9:eb:a5:
28:c2:11:6d:4e:2a:13:1f:04:eb:29:31:1b:9e:bf:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:FF:1A:1F:E5:BF:E4:B3:A7:B1:BD:CC:D9:A8:8B:FE:2F:82:DA
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:03:2c:3b:a7:8b:16:bb:93:c7:56:ce:06:35:c4:1c:2d:
4b:d7:ef:99:8b:fa:c7:03:b6:ca:6b:af:a7:9d:48:13:d1:df:
77:b9:cb:4b:4f:01:0b:c2:53:b8:db:08:e0:a0:69:90:42:8b:
94:31:b6:84:84:5c:b3:07:0a:c4:1e:a6:cd:fb:26:ab:8e:f5:
58:b4:4a:ba:cf:17:b3:6c:e7:e2:54:b1:b2:12:08:36:87:22:
22:38:65:6a:df:b4:aa:65:6e:64:eb:b6:f2:76:6b:c8:27:70:
75:24:fa:8f:6a:fa:6d:69:ea:62:ac:02:82:db:73:01:85:6a:
ca:4d:77:c0:37:f5:2a:df:3d:0c:b3:be:5f:8b:5a:9e:db:e2:
b9:b9:7c:0d:7a:e6:89:04:62:98:8c:4c:c3:b1:de:ae:3a:ea:
3c:ba:f8:dd:16:77:de:5c:14:a7:ca:75:5f:7f:27:98:3f:da:
47:25:ff:a9:38:cf:1d:2a:1a:97:69:ce:5a:76:97:29:57:87:
46:a3:82:9c:e4:3e:bd:05:a6:db:1b:43:45:78:bc:1d:f7:fa:
7a:19:74:4f:9c:c6:af:5f:b5:e1:7b:83:92:1d:97:70:5c:da:
cf:40:e3:18:68:18:ed:29:10:22:ac:6b:3c:53:a0:e1:6e:fe:
77:2f:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:31 2025 by rpki-client