Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: MAVCqZsAtk/XvauyAGrYrJoov84+ZYvKTVGXxlUw2PU=
Subject key identifier: 8A:A3:4B:76:DE:54:45:10:86:76:4C:43:71:DC:F9:91:0B:16:99:B8
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019A71808C38CAE2C9F34F54E48EA34AEF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 07B9
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: Avvx3aT3VRXUTrx6x69kC7208rk.roa (hash: mkB5F6JMzCQ+6uSffkBPqIwarvvgqz8B0gcG77lROr0=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: 66sVYryzNfgapDp37f7lIlNs7gBkfcwdFOZN9NueH4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8c:38:ca:e2:c9:f3:4f:54:e4:8e:a3:4a:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=8aa34b76de54451086764c4371dcf9910b1699b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:c1:dd:76:03:b8:f4:c6:88:81:0a:57:c9:
c6:29:44:3a:20:1e:2c:8e:0f:9a:ed:5a:d0:9b:da:
97:ba:5d:c4:77:0f:66:ec:b3:51:60:61:0b:eb:65:
fa:4d:df:bb:c2:86:5f:62:9b:a3:60:40:eb:0a:25:
1e:ff:be:fa:16:67:58:18:0f:38:1b:f9:df:cb:7e:
24:15:e7:58:43:1b:ca:ad:21:62:7f:94:08:91:ee:
00:13:57:72:13:df:a5:96:11:38:07:42:39:9b:52:
eb:e2:8d:87:33:76:5c:11:3b:86:0a:d7:17:af:20:
d9:b4:8f:23:35:8e:c2:9b:ea:d0:91:46:04:c3:59:
5b:9e:45:68:77:de:77:8a:6b:e5:16:23:44:31:c0:
00:d2:7a:2b:c9:da:70:51:b9:35:b6:c6:5d:30:89:
0f:a1:e8:b0:38:37:38:91:5a:0a:15:66:cc:3d:ea:
33:83:6b:d4:58:f5:bd:77:e6:2a:09:ec:13:4d:7a:
7e:32:55:7c:3a:3b:58:fc:1b:15:30:83:bf:bc:ac:
b4:3d:60:83:a2:04:7d:a4:98:81:91:7b:35:8f:df:
ae:7b:ae:51:2c:9a:30:98:ab:60:93:d5:ca:c8:9e:
51:92:f4:1f:04:8b:ed:3f:6d:71:7d:7c:e3:84:9c:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:4B:76:DE:54:45:10:86:76:4C:43:71:DC:F9:91:0B:16:99:B8
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:54:a4:31:01:66:0d:ca:83:19:9c:d1:9b:b9:df:21:53:
5d:82:ad:a6:88:1b:7d:4d:5c:f3:d4:ad:0e:48:87:93:77:c3:
3b:29:c6:10:a8:3b:f8:5a:8d:00:e3:74:66:80:62:16:d1:ac:
c8:ec:35:0c:86:d4:ce:01:9c:e2:70:71:64:d1:c3:54:e9:7c:
55:85:23:ca:87:05:3a:93:11:cf:c0:66:52:63:d0:84:be:0f:
42:72:a3:83:13:7c:4f:36:60:6a:78:be:f8:31:e4:7a:bb:b2:
8a:54:31:f4:07:d6:59:d9:09:b6:1d:e7:16:21:b7:fa:8e:61:
e8:1a:a4:5a:83:ec:87:6e:59:f2:e5:94:71:c1:b3:18:b1:30:
f0:04:2d:d4:7e:59:1b:2c:38:3d:74:70:e2:fb:d0:8e:33:11:
31:ef:df:e9:95:a4:55:68:30:80:7f:ba:e6:68:2b:49:48:99:
8d:b0:8e:34:f9:2e:c5:71:4d:74:c8:7a:1a:9d:69:71:8b:33:
d3:dc:8e:72:49:ad:96:f3:bf:aa:ea:2b:ac:7d:39:b7:32:8b:
d4:05:e8:0a:96:4f:db:69:b7:3a:3b:ef:d9:01:2e:b8:96:91:
89:20:ca:5f:0a:db:cf:23:80:80:2e:4b:0b:c9:39:c8:ed:6c:
93:51:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:01 2025 by rpki-client