Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: 2CoYzq1huCVO8GlkV8ZFScNfEiCbusLqKoXh0Vswzlo=
Subject key identifier: CB:65:DE:77:EB:19:14:FE:5F:BA:CC:FB:CE:0D:9D:C4:EE:AA:33:EB
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 019A725D00B2C64DE20E026E955D43B5F52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0FA5
Signing time: Tue 11 Nov 2025 10:01:28 +0000
Manifest this update: Tue 11 Nov 2025 10:01:28 +0000
Manifest next update: Wed 12 Nov 2025 10:01:28 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: F6bc1kFN7Qs3oKHLIk+O9Y88Vy7U6sYqmbi36fmiu6M=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5d:00:b2:c6:4d:e2:0e:02:6e:95:5d:43:b5:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Nov 11 10:01:28 2025 GMT
Not After : Nov 12 10:01:28 2025 GMT
Subject: CN=cb65de77eb1914fe5fbaccfbce0d9dc4eeaa33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:a2:cf:e0:18:0c:ba:fd:f5:15:d5:f0:60:
cf:26:9e:75:05:24:41:1e:b3:18:a9:dd:52:e1:82:
ae:31:cf:ac:7f:fe:cc:49:e8:38:ee:66:2f:73:f6:
13:2c:f2:dd:b6:20:4f:f9:96:3a:9c:9d:91:18:23:
9f:3b:01:2f:cf:ca:54:78:17:00:3e:38:e9:09:74:
b8:58:50:fa:38:24:0b:4c:57:f2:58:f5:d1:8d:81:
f9:36:ed:1a:d0:28:81:6c:75:9b:e1:38:81:a5:36:
df:7a:70:63:64:a0:da:66:fd:ba:fb:16:d9:24:57:
39:fd:73:28:cd:3f:4c:3f:b5:34:0b:15:0c:84:cf:
a4:ff:bd:91:ff:ca:25:b8:bf:7c:25:c3:79:d8:93:
a9:6d:4e:8d:73:3a:f6:43:52:12:75:62:73:c4:15:
fe:71:24:cb:72:07:ea:1b:2a:c6:b2:32:04:1f:d5:
b4:5e:5e:60:c9:69:f0:47:6d:82:c8:37:3b:54:3c:
84:cc:63:d0:ca:0f:ce:69:ce:b9:94:8d:eb:71:1b:
0e:c8:27:fe:30:26:f8:c2:e6:7e:a7:bb:4a:b7:da:
a8:33:38:a9:32:a3:95:aa:86:c3:e1:6c:bb:27:03:
aa:d0:f1:2e:21:a3:ae:2a:45:6e:56:48:71:3f:e2:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:65:DE:77:EB:19:14:FE:5F:BA:CC:FB:CE:0D:9D:C4:EE:AA:33:EB
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:a0:2f:f0:c9:77:37:12:25:24:de:d6:ca:d4:dd:2b:ce:
5b:c0:12:1f:0a:4e:da:50:3c:45:2d:36:34:df:3d:1a:c0:c1:
6e:ea:db:7b:76:be:8e:cb:c7:d4:5b:57:59:92:fe:77:a2:2f:
1e:25:bd:5c:cc:39:72:42:5c:22:52:2c:c2:73:2b:44:37:f1:
54:cd:9c:b5:5f:f4:9f:7c:f2:5a:ac:cf:45:af:12:ef:6d:e4:
79:e9:7f:b2:45:60:67:26:31:e2:10:1e:69:28:18:8e:01:ba:
4b:55:80:c6:05:97:02:48:c4:8f:60:57:9b:fd:51:f4:43:eb:
cf:ac:3b:cd:09:d4:2c:c7:8b:01:c0:6d:81:3f:3e:f8:0a:49:
66:be:78:80:f0:70:b7:09:a2:8f:a7:40:86:79:4c:b6:d9:fa:
42:a8:1a:67:c1:0a:a7:d5:8f:eb:fb:29:a3:23:c2:5d:a5:40:
a4:18:44:78:61:45:94:6c:57:64:79:ec:94:71:4d:47:bf:02:
5d:68:30:d5:5d:63:e7:a1:7c:22:5d:df:80:39:d3:6c:29:2d:
e4:94:40:ab:3e:0e:52:56:d7:75:6d:c9:17:cc:93:53:53:93:
99:94:0f:82:ce:9d:c2:e1:1e:f0:87:c2:4c:39:b4:0c:b4:c8:
80:de:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client