Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: 1mvVevkpiIedsfNOXRA0y5eU3zSQ0bdad6JIV6V4EJw=
Subject key identifier: C6:17:59:4D:C4:59:78:A1:AC:D0:BA:AA:4B:BE:C7:4E:0F:E7:62:1E
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 019A71B92456D62EAB52DE523963709A495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 07F8
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: zuJc178d3j5i7ZmvyYY0F816X1OW0mifzmxW0tHacJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:24:56:d6:2e:ab:52:de:52:39:63:70:9a:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=c617594dc45978a1acd0baaa4bbec74e0fe7621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:56:8d:41:39:c6:a4:ba:5e:24:15:b4:62:
4c:3e:fc:8e:03:b9:e8:64:59:73:a9:0c:50:ce:2a:
17:9e:50:c3:e1:0b:21:d5:a3:92:0f:5b:e9:34:0f:
d5:ae:fd:34:cc:80:1d:85:fa:ca:4e:96:b3:8f:b0:
61:5f:73:97:80:0b:3e:b4:53:a5:fc:80:cb:28:28:
86:fb:63:00:42:c9:a9:00:b9:c1:a4:b5:7a:0b:bd:
00:3c:1c:7d:43:90:9e:ed:f7:f6:aa:75:cd:ff:73:
5c:dd:a5:7f:84:f8:db:90:ed:3f:78:60:9b:e6:ee:
e7:7f:bd:0e:89:e5:a8:22:eb:c7:9e:72:5b:5f:2d:
4f:b5:dd:7e:9d:67:cd:06:87:b8:a4:b9:d0:8a:a0:
ef:2a:eb:85:7b:90:c2:b5:ed:ac:3f:44:4d:c8:02:
a2:9f:11:77:d3:c3:e7:9b:ea:c8:ac:5b:16:25:1c:
f2:8f:60:82:52:ac:82:68:3e:21:0c:37:2d:02:52:
2d:eb:02:f2:10:fd:60:2b:a0:a2:93:17:2a:1a:62:
2e:1f:af:dd:b4:b1:ad:aa:94:29:cf:49:0d:ce:b6:
85:ed:10:7b:62:49:ac:03:14:75:c4:f8:03:77:e3:
72:a7:1c:c0:2f:61:28:24:45:7b:4b:7f:c0:2a:58:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:59:4D:C4:59:78:A1:AC:D0:BA:AA:4B:BE:C7:4E:0F:E7:62:1E
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:84:58:ba:5c:65:a2:60:4c:ef:37:34:0c:da:bf:e2:5d:
25:2d:20:89:ae:aa:29:91:2a:78:29:d2:36:e6:56:a8:33:af:
28:bd:30:fc:4b:e8:1c:34:e4:ad:e2:43:1d:06:0a:16:f5:d7:
32:8d:3c:b8:2b:7e:85:c7:e8:ef:71:0a:37:32:8a:81:02:d2:
86:69:a1:1b:7b:6b:2f:a9:68:d1:fe:e1:0c:96:c4:c9:21:c2:
b4:0b:5e:41:7f:16:58:00:fd:4a:7d:1f:19:9d:6f:c5:f7:fe:
c9:d8:86:09:0b:56:d8:ce:48:57:c5:ed:f1:5a:26:5e:5d:aa:
73:d9:36:3d:9d:e0:f1:ed:06:92:81:14:f2:31:1b:26:e0:73:
36:c1:e4:8d:a1:97:38:c6:a9:4c:9c:2f:90:84:bd:f1:d2:ce:
da:22:1f:74:7f:79:bf:e7:56:9d:db:52:d3:f9:d2:08:83:ae:
2b:fb:74:41:f6:8c:de:c1:4d:43:77:c4:cd:ad:11:d3:e0:64:
77:79:5e:ab:76:20:f9:ad:78:f2:20:83:01:67:01:c2:b4:27:
b0:20:b3:23:27:4c:a4:9d:a3:dd:b1:3a:e1:c9:b3:3b:60:43:
57:85:6e:a6:b2:7a:aa:cb:e4:cb:29:32:30:0e:fa:2d:57:10:
16:a7:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:18 2025 by rpki-client