Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: Kw23X4UfuHXc2kEnsOsLt1GThza9s8jsx//H13KYLrY=
Subject key identifier: AC:D3:C7:A4:92:D4:0D:07:74:30:38:7D:7C:AF:E5:AC:74:36:5D:E1
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 019A725CCCE2292EF61DDE463DE8F104D344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 0683
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: nHHMtA749ICJ53HX0mtiM5gj984k+AD34znnCmOWKcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:e2:29:2e:f6:1d:de:46:3d:e8:f1:04:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=acd3c7a492d40d077430387d7cafe5ac74365de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:05:75:6a:87:75:ed:93:d0:b4:0d:c2:f4:
26:77:b5:18:38:b0:ab:dd:72:a2:dc:af:77:25:7d:
b6:06:d0:b2:e0:74:1c:dc:51:6b:d7:8a:a0:5b:70:
bd:df:13:94:d5:f9:cc:1d:5a:76:d2:f7:d0:1f:15:
14:87:10:89:02:c4:92:a5:1c:9f:70:95:b5:6b:ff:
8b:a8:cf:3b:c2:e0:87:f8:4b:6a:c0:ac:8b:d9:bf:
a4:8f:49:08:d7:71:64:4a:23:cd:e0:f8:80:73:fc:
03:ee:eb:23:20:de:39:1e:c2:f0:d2:96:ea:ac:5f:
b2:b7:bf:16:dc:7c:c9:fe:ec:a1:69:66:73:e6:e9:
99:38:da:7b:ae:1f:94:3b:4d:de:74:44:59:fd:98:
08:2c:3d:5d:d1:44:71:b5:3b:47:5f:2c:41:77:a4:
4b:1d:ce:30:a3:46:19:b1:07:dd:f9:73:af:b0:d6:
be:b7:04:65:3a:21:7f:97:c3:17:80:db:08:7d:8f:
73:8b:97:fc:a8:37:7c:9d:d4:7e:80:17:c7:2a:07:
7f:bb:e4:6a:35:20:09:cc:34:f7:9e:0e:44:72:1f:
89:4e:3a:c5:5f:2f:26:7f:d2:8b:aa:28:92:f5:df:
d3:b5:af:7c:13:f4:5e:ae:66:85:14:c5:85:06:33:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:C7:A4:92:D4:0D:07:74:30:38:7D:7C:AF:E5:AC:74:36:5D:E1
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:3b:25:9c:48:a9:a1:36:51:c9:de:16:43:88:a1:02:f2:
3d:24:ba:69:8e:b3:b0:f9:c0:fc:c4:24:ec:95:01:67:68:c4:
17:be:bd:c7:a9:75:d0:25:fd:2c:b5:4f:b9:98:f0:b0:98:fe:
0d:7a:4e:6b:94:3d:db:85:00:26:55:02:20:68:20:4e:db:eb:
b0:89:d1:2d:91:dc:b6:3b:63:24:73:44:19:de:43:2f:15:c5:
9a:dc:d2:bb:77:1b:5d:ad:82:e1:b0:37:ae:1a:f0:0c:c0:b1:
f6:c2:7c:1f:ef:2c:8a:db:02:a9:89:69:af:d0:f6:3b:f8:88:
8e:ad:b5:9f:87:18:e5:6f:8a:f1:79:0f:22:77:ec:d7:a5:e3:
45:9e:06:33:46:55:7f:10:27:b6:dd:21:e0:f7:99:c1:71:44:
2a:dc:4c:79:14:2a:18:de:ac:a3:bf:1e:77:92:19:6c:7d:17:
98:29:43:55:96:52:a0:a5:25:f0:9e:30:13:95:dc:0a:91:e0:
c5:7f:ba:b4:d3:c4:8a:4a:34:6a:94:08:00:b1:76:93:44:fe:
05:3a:56:c7:55:dd:1d:a4:a4:ed:61:05:36:dc:0a:9a:37:b3:
2e:4e:16:5b:9d:f6:b3:bb:75:68:94:6b:02:0a:07:0e:cc:b7:
44:e6:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:57 2025 by rpki-client