Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: uim897vhnRpkwPo4Rxgf3WycZX9QbOMmhZjyCt89FAE=
Subject key identifier: CC:90:99:07:20:40:78:F7:76:C1:2C:69:CF:2A:FF:F6:CE:BF:98:64
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019A71B842163A9F79EB7856AD42B2C9B3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0EBC
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: EQHzzHICqoV6hS6DWHAiANNQxPnMY0jQhl+h9Z7kgoU=)
2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:42:16:3a:9f:79:eb:78:56:ad:42:b2:c9:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=cc909907204078f776c12c69cf2afff6cebf9864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:da:74:9d:e4:6e:23:b0:d1:58:c8:4e:e5:
a0:42:09:e5:ee:1f:6f:46:d8:39:f0:14:f3:22:c3:
1a:1a:ff:09:98:b1:d8:79:1d:fe:d9:dd:a3:c3:20:
41:9e:d7:0b:c5:ef:38:28:0a:fe:b6:09:b5:c2:ee:
1a:d8:95:70:d7:71:4c:00:02:5e:06:9d:7a:76:65:
88:66:5b:b5:53:e9:b8:42:6b:1d:17:09:88:95:cd:
35:0d:31:94:23:d1:f0:7d:bf:15:fa:5d:36:8c:6f:
75:d9:7f:d9:8d:8b:67:91:63:6e:35:e3:9b:a3:48:
2e:a7:01:36:f9:e4:7c:fb:4e:d0:ad:3c:33:5a:5b:
95:dc:52:d9:27:cc:f9:64:f9:22:d0:b0:fc:ba:fe:
7f:00:65:55:03:61:94:e7:40:c4:2e:2d:44:f4:8c:
65:d3:82:c9:56:cf:72:03:9f:12:af:14:67:06:d4:
75:f2:9c:1a:50:bf:00:64:a8:9d:a0:2c:88:1b:7f:
0b:11:53:00:61:34:46:fb:a4:58:76:1b:c1:6e:3d:
4c:c3:fc:84:54:cf:c6:ca:be:69:4b:75:36:d9:6c:
c9:f2:dd:f7:6d:87:76:8b:de:94:b4:93:bd:fb:00:
db:82:fd:8b:cd:c2:70:49:30:3e:01:4b:40:45:a5:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:99:07:20:40:78:F7:76:C1:2C:69:CF:2A:FF:F6:CE:BF:98:64
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0e:08:e7:15:85:7a:3f:de:45:4c:ae:80:76:72:e9:a3:3b:
51:f6:e9:8d:9d:3c:a7:a5:31:99:f7:35:91:b4:61:75:e9:c3:
c9:4e:8b:c9:a1:8f:e0:00:06:db:40:bd:06:15:52:a5:76:ed:
e0:93:ec:eb:19:39:a3:a7:ef:2a:11:19:5c:b9:69:b3:d9:05:
a4:20:18:f6:ac:1d:9a:85:8c:06:d6:04:4e:e6:d1:12:37:be:
97:36:63:1c:22:56:d4:e1:3c:46:35:22:ab:4d:35:cf:ae:48:
67:85:aa:95:4a:0d:97:fe:13:dc:a0:7f:47:55:76:5b:7b:c1:
38:8c:53:b5:f7:c9:2c:68:60:cd:5b:05:75:02:de:ba:19:93:
98:d3:01:81:0d:45:33:d6:fb:e0:de:4d:a5:4d:a1:59:f3:93:
d3:3e:2e:0a:32:98:5b:02:8b:6c:2a:1f:5b:4a:b0:23:d0:f7:
10:77:7f:6e:f3:da:e9:55:e8:d2:80:02:27:cb:0a:50:2a:c7:
91:99:69:d9:18:80:bf:f7:dd:e2:84:43:7a:66:ba:5f:b6:c3:
02:20:44:f4:f3:2c:02:f4:be:29:24:65:37:aa:ef:36:d6:ac:
78:c8:86:58:af:4f:9b:74:22:21:75:c8:e7:4c:98:72:7f:23:
ce:82:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:52 2025 by rpki-client