Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: clgRBbXmgL23pP5v8yWDRpNr3zvF4DVJUSLY30SIvkc=
Subject key identifier: 60:9C:98:0E:3F:0C:7A:ED:4E:83:15:8C:4F:90:6E:1D:C0:35:E4:57
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019A0411AA2668ABE86C66827086E0F9BDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 16FB
Signing time: Tue 21 Oct 2025 00:00:57 +0000
Manifest this update: Tue 21 Oct 2025 00:00:57 +0000
Manifest next update: Wed 22 Oct 2025 00:00:57 +0000
Files and hashes: 1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: oDAzbuhVo1kvSqrz6R4EgW6LKvvxcZUcb7VtLokfpgs=)
5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:aa:26:68:ab:e8:6c:66:82:70:86:e0:f9:bd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Oct 21 00:00:57 2025 GMT
Not After : Oct 22 00:00:57 2025 GMT
Subject: CN=609c980e3f0c7aed4e83158c4f906e1dc035e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:41:f4:19:b7:c8:d8:26:36:60:9b:7f:e2:
ce:a1:c5:7b:e1:75:af:cc:9f:68:d1:10:d3:64:ad:
4d:5c:69:9a:e3:c3:df:b4:09:f8:f1:2a:6a:d6:55:
c7:27:16:9a:c9:57:7d:3e:e5:6d:72:d5:e0:9d:f8:
d4:4e:04:46:aa:8d:98:94:df:99:7c:bf:d9:cd:97:
13:04:25:90:e8:e5:62:59:ea:c9:46:65:cd:55:4f:
b0:87:a4:10:72:15:81:1b:fa:6b:85:23:19:bc:58:
c1:30:e0:f3:f0:cc:20:f4:0d:43:ae:92:d6:5c:08:
35:1b:7c:08:b3:f6:8d:67:cc:8d:b2:71:04:cf:90:
d4:c1:b0:7b:4a:97:9f:b4:fa:a4:3d:16:e3:80:ec:
e7:3c:b4:43:9f:a8:bd:33:72:68:4b:2a:09:23:89:
09:19:ea:3f:20:69:b7:95:55:a0:3b:19:fd:fe:db:
b3:57:99:d2:59:90:cc:b7:27:29:da:c5:3f:1d:6c:
0e:e2:60:fc:c5:06:82:50:de:82:f6:73:df:3c:01:
81:01:13:a3:e3:35:4b:79:0a:3e:98:c0:6d:15:7a:
fa:f6:1b:c4:ba:26:0a:a3:2d:2a:63:82:bd:d2:6e:
fa:f3:14:46:ed:d7:16:8f:89:01:6e:5c:80:6d:e9:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:98:0E:3F:0C:7A:ED:4E:83:15:8C:4F:90:6E:1D:C0:35:E4:57
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:68:c0:fe:30:d9:05:a8:be:a4:f4:df:c5:af:7a:0b:2f:b3:
48:be:cd:34:be:f4:3c:77:a6:b1:b5:c7:20:2f:ac:21:2e:46:
f5:5c:39:bc:de:c7:49:dc:64:fc:51:f7:8b:12:87:0e:22:0a:
d8:d8:c7:bb:86:98:65:d4:5f:1f:d7:09:97:b8:72:2c:ee:99:
a6:80:1b:04:b4:4f:d5:f1:d3:87:c8:f3:b2:0c:85:87:73:b9:
8b:b6:d5:9f:fd:7a:b8:47:4d:4e:f2:e0:62:b2:b8:ee:fc:9f:
ba:5f:83:b3:dd:42:cb:a3:29:ab:b4:9c:e6:5a:6f:f9:a2:b2:
32:82:9f:6e:87:94:79:28:83:cd:04:56:63:1c:ae:1b:44:ec:
0a:69:69:69:fd:82:84:d3:7c:36:31:50:2a:8f:d8:10:63:c4:
cb:5c:bd:d1:f6:ee:d9:dc:fd:94:96:f4:07:3f:5d:b9:0d:86:
73:42:4e:4e:80:06:29:c9:c9:64:af:5f:84:a6:7d:37:5c:cc:
43:ee:5e:94:ac:4b:de:b0:ed:c7:40:19:00:94:a2:de:43:fd:
58:ff:3c:95:d7:d5:d6:ac:b0:cd:c8:92:f8:b4:a8:6b:e6:c9:
8c:98:99:f6:93:c4:66:31:82:d6:be:a4:4f:bb:d2:fc:88:c4:
37:f3:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:52:10 2025 by rpki-client