Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: fCjeaPbAh3xx08clLkvhaCPtskDIxlb+A4RHITLzD7Y=
Subject key identifier: 9F:6F:EC:1E:B8:93:F3:FC:23:0D:B4:20:C0:AC:E0:01:6A:02:3C:59
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 019A73010BF49F72A03E1F6CB6C12A23547F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0DDB
Signing time: Tue 11 Nov 2025 13:00:39 +0000
Manifest this update: Tue 11 Nov 2025 13:00:39 +0000
Manifest next update: Wed 12 Nov 2025 13:00:39 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: Byt6bo5J9DrWd+YQ/C2qr0IvbXlMfgJbP4rT0Ie3Veo=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0b:f4:9f:72:a0:3e:1f:6c:b6:c1:2a:23:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Nov 11 13:00:39 2025 GMT
Not After : Nov 12 13:00:39 2025 GMT
Subject: CN=9f6fec1eb893f3fc230db420c0ace0016a023c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:7a:fa:39:45:bb:71:52:ed:bc:6a:70:6a:
aa:f3:3a:3f:8b:6b:a9:80:a5:75:37:20:08:f6:d9:
e5:48:5d:77:a2:ab:17:b4:22:e0:f3:c0:aa:85:0b:
7b:f1:7f:51:8a:37:07:e3:e5:e0:1c:02:cb:c6:6f:
c7:60:cc:39:79:fe:e9:bb:2d:14:7c:0a:21:56:b2:
88:06:7f:70:54:ef:79:e8:fb:c7:99:85:37:f6:74:
24:e2:b8:31:9d:f2:c5:ce:6d:91:7c:6b:1c:49:48:
94:dd:9b:fa:c9:24:cc:56:8f:13:26:d5:95:b2:ea:
0d:42:92:04:89:96:da:5c:07:68:e6:c8:a3:1f:d8:
d8:c4:c6:49:4b:44:6a:23:29:08:23:46:d0:ab:0b:
2c:aa:6a:17:25:6b:5e:72:e6:15:4a:56:88:40:d1:
18:de:4a:a1:07:eb:d8:88:da:ad:05:c3:0e:d9:c4:
4c:7b:61:87:9f:16:c1:74:e8:a9:c1:7b:3c:f0:12:
6a:7e:d1:a7:3b:5f:37:f3:7c:1e:d9:ff:ab:ed:7f:
43:eb:7a:aa:8a:c2:8a:b9:f4:fa:95:9d:7e:b7:37:
c3:32:27:7e:4d:2e:6f:91:90:2f:ad:64:a6:c9:49:
a3:87:ec:c5:5d:b1:fe:85:93:f3:44:67:0e:73:56:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:EC:1E:B8:93:F3:FC:23:0D:B4:20:C0:AC:E0:01:6A:02:3C:59
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:af:cb:b8:15:93:10:22:41:83:84:a2:ab:06:dd:b3:31:
9f:27:7a:f5:4c:25:cf:77:a1:57:e4:78:ff:7a:83:1d:4e:02:
9e:1c:78:fa:1a:ac:45:5f:76:e9:94:a7:0a:ed:2d:ab:ba:f9:
07:f5:c9:42:a7:32:af:a0:1f:c5:5e:df:b6:1d:9c:42:33:18:
f0:d2:f4:57:46:29:1c:2d:83:db:20:0c:62:30:23:34:3c:f6:
ce:42:4d:4f:ff:d7:75:94:82:56:7b:d7:89:e1:bd:d8:e4:01:
7d:3a:2c:0e:5d:56:39:9e:e4:15:40:a0:1d:81:26:e6:af:ee:
a0:2f:78:f8:9b:27:22:5c:ed:0e:06:5e:2e:c6:7f:31:83:2d:
d4:a8:b0:5a:37:91:b1:ec:60:ed:62:94:e3:7a:3d:d2:a2:bc:
91:d7:8e:14:8f:77:ea:90:77:6d:40:41:35:c5:7b:45:e0:93:
ab:65:1e:0a:ea:54:64:81:3e:34:79:24:20:d9:44:9c:b9:5c:
c9:be:c1:61:5a:38:c2:f1:4e:20:7b:29:53:d4:ef:d8:a2:bb:
b3:a0:39:22:32:4a:b2:38:66:3e:16:b1:25:48:4f:fc:12:40:
a9:e8:9d:2e:c4:b4:1c:3c:3d:fe:4a:df:fd:d8:4f:8d:58:d3:
4b:24:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:34 2025 by rpki-client