Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: 40dPEvWzSaGTrsrkURjOama8I7DeKdpEchZ1MbfYrCU=
Subject key identifier: DA:B9:77:46:B2:7E:19:53:46:11:32:33:8E:F9:5A:43:B8:62:63:2F
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 019A72CAA7E40359FDD056116876E5F0E826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: Mpq1DtisRDgb1zJ4vEC0HjTy/QBQ20EVF+1Akh0hlC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a7:e4:03:59:fd:d0:56:11:68:76:e5:f0:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=dab97746b27e1953461132338ef95a43b862632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:c7:ec:41:1e:5b:b3:e1:50:31:9e:ed:0e:
e3:5a:0d:85:9d:44:68:89:1d:a8:69:63:17:4b:40:
9e:d5:b3:9b:77:e9:0b:e1:05:6e:44:be:ef:63:45:
29:be:ee:fc:6a:d3:82:ee:3f:ab:0b:6c:1d:7a:53:
2e:9c:d8:52:f4:f0:1f:d5:90:46:2a:95:aa:49:60:
d9:fa:b9:1b:d0:45:02:fe:9d:7a:30:0f:0a:85:c6:
a6:82:ec:6c:a6:2d:d2:ec:87:a7:c2:4f:f6:3d:4e:
b4:d6:91:de:cc:be:90:9f:29:87:c7:b8:67:d7:65:
56:f2:92:25:cd:f2:77:8a:46:8a:03:e1:71:7b:4a:
8c:18:db:f1:c8:60:c6:23:e0:e4:74:9d:3d:d7:4a:
e9:43:61:41:56:42:1a:01:17:79:29:f9:2b:11:31:
8e:6b:c2:25:35:0b:50:d8:27:89:13:d1:f5:5f:c5:
14:3f:0f:bf:0b:e6:92:9d:98:fb:8a:24:c4:91:52:
04:45:75:6f:0e:95:05:b8:8d:1b:5e:55:e2:f1:94:
30:78:e7:69:b0:c7:d0:18:8d:5c:cb:82:02:47:f8:
3b:2e:6c:72:79:db:87:bd:b9:0a:ea:51:9b:90:52:
40:e9:18:c5:3d:9f:12:36:66:be:a4:87:a0:f5:1a:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B9:77:46:B2:7E:19:53:46:11:32:33:8E:F9:5A:43:B8:62:63:2F
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:29:c9:94:e3:4c:5e:36:1d:49:08:65:79:8b:2d:d0:f8:
f6:63:dd:f0:7f:e2:a8:34:c8:b7:a0:1d:40:6e:a4:4d:69:79:
33:b2:c6:22:9d:84:3c:5f:ad:7a:5b:77:2d:77:d9:9f:50:72:
f5:ad:6c:ce:bf:aa:ca:25:3c:dc:8b:ee:6a:6c:65:d6:62:54:
2b:fd:b1:26:32:d1:c9:5e:ca:eb:65:a2:29:47:98:10:26:02:
2a:db:f2:1d:c1:e4:92:c8:54:9e:9b:bf:19:fc:7d:b5:48:e9:
a1:12:1d:1d:78:e9:4b:90:cd:83:84:31:14:ce:3c:e3:73:e9:
13:d1:0a:00:6d:d6:48:da:15:f5:b6:91:42:42:98:8c:1a:4e:
6f:c4:67:ae:37:53:b3:2e:55:91:d9:ae:30:73:20:d6:ba:c7:
76:0b:8a:76:8a:08:b5:7e:b0:79:ee:68:91:a4:74:2c:5b:08:
90:cd:3b:15:15:fa:33:50:1a:4e:12:4c:9d:05:29:ae:0f:64:
ee:9b:cb:5d:8a:e7:e2:70:eb:89:3d:d9:60:2f:2c:7f:aa:f9:
92:ca:ad:04:ea:67:89:23:d7:90:0d:71:1a:7c:02:f1:c1:bc:
06:2b:88:1c:7d:43:12:a9:02:e1:31:9d:41:45:09:f0:1c:0a:
03:b0:64:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:16 2025 by rpki-client