Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: Oce46+UbonhW8EmsK09AxIlRl1pPYRtXuxZb3ddcKAA=
Subject key identifier: 65:83:A3:CF:51:49:01:1D:89:FA:C7:6F:AE:43:7E:2D:6D:CD:0E:D1
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 019A725CEC7BF4C3CB13392C8E9F3446E2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: uM39D/aIgDK6fKlRrjw/ze8kXGh6s9Tz0RHW87mkhtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ec:7b:f4:c3:cb:13:39:2c:8e:9f:34:46:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=6583a3cf5149011d89fac76fae437e2d6dcd0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:4b:86:4c:83:38:af:c6:90:af:33:87:2e:
8c:98:ae:0e:d8:b8:2c:30:43:b3:46:71:90:47:00:
b4:63:f0:ad:a0:1e:98:cc:9d:d2:07:24:7c:8c:89:
07:08:e1:9f:73:4d:15:b0:1f:10:76:e3:0b:49:f2:
6a:90:d2:f8:8e:63:3a:0b:d6:75:68:52:27:2d:cd:
c5:d3:ba:51:97:9a:c3:bc:72:e0:96:85:d3:8c:fc:
9e:3a:e5:a8:45:8d:ca:2d:65:82:c3:0b:63:99:fb:
0d:7a:4c:50:e6:2c:fb:d2:e2:63:1b:31:f3:1d:bd:
e5:49:85:da:3e:fd:10:6b:e5:d0:f7:bd:21:44:72:
52:51:e7:ae:b1:a1:a8:a8:4a:ff:6a:52:90:b5:07:
86:3f:70:63:3b:03:c5:3e:82:0e:b3:f3:fe:45:a1:
c7:04:bb:61:be:75:d1:cb:59:82:26:42:e5:2e:e5:
71:3f:bb:eb:bd:80:75:02:20:4b:38:bf:71:02:36:
3d:22:da:2d:3e:b2:f0:8d:25:78:fc:bd:2e:dd:e8:
b0:95:01:98:b7:37:62:3e:78:09:31:de:2c:9c:f0:
c3:15:8f:42:36:11:f2:db:05:ea:09:73:c5:a5:23:
70:da:2d:f1:b0:bd:24:c4:01:91:ed:58:a4:55:af:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:A3:CF:51:49:01:1D:89:FA:C7:6F:AE:43:7E:2D:6D:CD:0E:D1
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:60:6d:2e:ca:b4:1a:3d:e0:82:0b:63:49:af:fc:c8:34:
80:c7:97:a6:19:1f:66:a0:f7:af:a4:16:08:78:23:2a:6b:18:
ad:55:eb:1a:ec:3e:33:88:d3:7b:76:31:e6:ea:99:e2:9b:1b:
60:40:5a:df:40:40:78:94:29:5c:70:9c:83:e7:f6:58:7d:4d:
3c:ad:74:4d:66:d2:bb:58:f3:50:ed:09:df:31:69:91:c2:25:
44:94:40:f4:12:b9:87:5d:ce:03:13:37:64:98:d0:e8:1e:f9:
91:8c:29:36:f0:12:02:06:7d:24:37:b8:ba:12:de:88:04:6e:
f1:e1:0d:26:c3:ba:52:a1:ea:f3:49:c1:80:0c:9e:25:53:44:
c0:f1:4e:44:2e:1d:2c:d0:a7:b8:f9:cc:86:53:cd:06:26:77:
ad:aa:76:7c:4b:5c:34:4e:f7:c0:2a:78:6f:15:e8:23:21:50:
6f:0e:c4:b8:d9:bf:47:99:a9:25:2f:7b:ac:ee:cf:bf:82:fa:
7c:e6:75:5e:9a:91:b3:3a:fa:b3:fd:c3:51:21:47:21:15:9c:
6a:9b:d8:66:1a:62:89:5c:ed:ef:4c:49:b9:8c:6d:d2:a3:7d:
7c:20:7b:3d:2e:85:5b:2c:ef:46:e8:15:cb:36:e6:0c:64:6e:
1d:af:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:24 2025 by rpki-client