Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: yWTUi7fUs1LkRHypBg7+MltCsZZvx3bPvhnZ+/ZMw1k=
Subject key identifier: AC:8A:31:16:EB:3B:D5:81:F9:3D:A1:95:D0:C8:13:49:BE:04:A1:79
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 019A72265CB6285F40513BD14FA65FFE0C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 0677
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: 0xtR9RD5bS2RGS6IkhcOMM67YOmI++6oiqUl5NQMzcA=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5c:b6:28:5f:40:51:3b:d1:4f:a6:5f:fe:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=ac8a3116eb3bd581f93da195d0c81349be04a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:ce:49:a5:6b:6f:f8:82:06:d2:45:13:a0:
03:37:61:c9:84:b6:7f:b1:df:1a:9b:dd:9e:7f:1b:
06:65:44:77:56:3c:7a:a3:9c:07:b8:f0:04:1e:dc:
40:a3:54:9b:42:c5:66:d0:4c:05:89:77:d8:fa:3a:
fb:ce:e3:3f:e3:fa:5d:b7:c2:e8:fe:b6:fa:4a:d6:
56:8d:d7:fe:c7:64:64:c9:d1:09:67:f2:81:02:f8:
56:80:e1:5d:b3:5b:0d:fb:a4:11:cd:6d:9d:b7:e2:
87:33:58:2a:95:2f:3c:38:f5:ed:8d:fe:02:d0:e3:
5a:47:b4:ec:53:2a:d2:4c:a0:ac:53:5c:76:a4:fd:
b5:8b:b3:c2:87:1f:e0:43:68:87:c2:06:63:a0:20:
5d:23:f0:24:11:65:5a:cc:4a:68:e1:51:fc:1f:0d:
21:eb:68:37:c0:46:56:41:89:41:97:91:7e:87:d1:
db:9e:a6:04:f4:5c:70:18:2e:8c:0f:6d:c8:d6:e6:
e8:27:00:9d:3e:fa:d7:9f:3d:10:bf:fc:05:17:fc:
70:8a:11:56:59:7d:32:27:c6:e6:92:63:bf:22:64:
e9:84:64:a7:a7:5c:12:05:6e:5d:a6:04:fa:0a:cb:
e9:7e:5f:29:1d:fc:7a:3a:fc:25:d9:11:aa:aa:34:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:31:16:EB:3B:D5:81:F9:3D:A1:95:D0:C8:13:49:BE:04:A1:79
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c8:e4:92:6a:82:d0:9d:ca:93:e9:69:f0:8c:9c:5e:ab:77:
7b:47:85:13:13:67:17:46:d6:b7:c5:e4:4a:99:ea:33:f6:10:
c8:26:2b:af:55:85:c1:c0:f1:f7:e5:33:e9:6a:04:0e:04:50:
9b:10:b0:56:e8:e2:2c:b8:0f:25:37:e3:7e:20:44:38:16:af:
c3:8b:d8:d7:8c:a2:7b:54:01:98:82:4f:84:59:32:07:81:5c:
02:ef:1b:97:63:4a:33:9f:15:75:f8:30:a1:a9:0a:81:5d:eb:
96:27:30:6f:22:51:a5:d4:4e:98:47:ad:bd:d2:87:27:0e:a5:
e4:34:0c:ab:0f:84:4f:38:16:70:49:30:37:7a:45:da:fb:93:
37:a6:7f:63:ec:62:a0:a6:bc:8f:9a:80:3f:a9:12:e5:08:19:
7b:bc:fe:da:bb:c9:b2:12:19:72:f2:06:b2:09:6b:c3:30:56:
9a:1c:83:de:b7:69:6a:a7:be:48:e7:7c:6d:19:b0:c3:fd:e9:
84:cf:26:ad:1f:cb:dc:11:ec:59:0c:b9:43:c7:88:1b:21:19:
99:7b:38:2e:9c:c2:20:9d:43:c4:be:99:a6:ad:c7:09:6e:f9:
94:90:1d:c0:b3:68:8f:1b:c0:38:d6:e8:ea:13:61:39:42:11:
56:2a:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:56:03 2025 by rpki-client