Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: OLsfu3tHtQGJA9l9XrAPFd/HtM611CDqOCVB+eph4Rw=
Subject key identifier: 94:2D:A3:45:3C:78:60:77:A8:75:3D:D8:A2:7C:6F:60:13:9F:AC:32
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 019A72940F1C95965108D7FA56ADD07416E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 0107
Signing time: Tue 11 Nov 2025 11:01:37 +0000
Manifest this update: Tue 11 Nov 2025 11:01:37 +0000
Manifest next update: Wed 12 Nov 2025 11:01:37 +0000
Files and hashes: 1: OILyzQ2UmvS21gSFd565SbxH7mA.roa (hash: 9fyLmCcJiT605kvUMhZI3DGLYcwb/Ju1g++2lmYXkfY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: OdfsI8R4k4o14b3CSe51M5Z9DA39H0+9EnmZRWPze3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0f:1c:95:96:51:08:d7:fa:56:ad:d0:74:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Nov 11 11:01:37 2025 GMT
Not After : Nov 12 11:01:37 2025 GMT
Subject: CN=942da3453c786077a8753dd8a27c6f60139fac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:d3:8f:48:2d:62:09:f9:28:aa:06:e8:9a:
a8:4f:88:d1:70:cd:91:af:2c:21:c2:7c:f5:ba:cc:
df:0f:b0:12:fb:dd:85:62:bd:d8:ee:0e:49:96:da:
0f:d1:e8:1d:b1:cf:3f:b9:4e:53:cb:22:1b:ec:80:
fc:03:19:4b:db:23:cf:8b:13:f3:77:4a:14:7c:1e:
70:31:96:76:c4:28:18:31:30:fd:30:73:dd:16:e6:
7f:92:33:cf:74:49:4c:73:13:fc:14:e9:82:63:10:
0d:d4:62:32:13:13:3e:c2:14:c3:ff:70:fc:ad:f4:
10:b4:d3:2b:a0:0c:f8:9f:9b:e1:59:12:ae:7d:0c:
d1:92:f9:fa:6d:09:4c:39:ca:23:28:14:a4:38:23:
44:1a:7c:54:de:25:96:f5:e9:4f:0d:71:9e:37:e4:
88:ea:ef:1e:bc:af:df:cb:a9:ec:cb:bd:72:d3:9f:
9b:85:b1:5e:04:1d:2f:9b:e1:0c:63:52:da:a2:74:
3f:86:e2:53:ad:f3:a8:a4:94:95:df:72:b7:30:9d:
f2:9b:bb:6e:a4:34:16:78:2a:49:6e:57:cf:56:1d:
23:74:ef:74:83:3c:6c:1b:ca:b2:56:ec:e0:05:e6:
78:6d:81:02:b0:e4:3c:5e:d1:e9:1c:f1:a1:5b:f5:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:A3:45:3C:78:60:77:A8:75:3D:D8:A2:7C:6F:60:13:9F:AC:32
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:79:c4:4c:c0:71:40:76:27:af:bb:60:d2:59:94:a1:18:13:
ce:d6:65:58:23:01:b6:c5:a1:fd:24:c5:1d:e6:13:3e:1c:c5:
ab:96:84:28:7c:fb:c8:ea:b6:5f:7b:56:c8:73:f3:65:57:fc:
41:cc:04:1c:c1:70:1b:65:68:0f:79:56:0d:f6:70:ac:c0:1d:
1a:88:3b:6e:af:32:39:e6:99:04:e8:53:95:02:ac:2b:f4:2d:
17:c9:43:57:24:7c:9d:be:13:1c:ce:73:a3:f7:1d:65:2a:1a:
d3:e1:97:ce:71:a8:09:e8:e1:7e:a5:31:09:2d:01:61:ea:f6:
94:49:02:b3:81:a8:03:87:78:5a:17:90:e3:a3:47:96:31:ad:
ff:c6:ef:91:6a:74:fb:74:d5:4c:20:f5:75:c7:c9:20:87:62:
97:fd:6a:6b:2f:cd:fc:24:26:29:33:ed:f4:64:f8:dd:52:dd:
2b:3c:c0:87:89:a4:dd:6f:eb:c3:cf:1c:6f:b8:3c:ee:fd:9e:
e7:b7:2e:93:cb:90:3b:13:63:3b:d8:d1:4b:d0:a1:37:e4:1b:
65:e6:9b:a8:45:17:ec:f8:2c:da:f4:e5:e0:c0:9b:33:52:e9:
cf:3a:3e:88:c0:13:19:ef:4e:32:ed:fa:32:11:f9:70:e3:21:
08:62:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:02 2025 by rpki-client