Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier: n1jX3YWvOoj5U1s8UooytBZLDB8wRzk9WzLUoIq6RQ0=
Subject key identifier: BE:24:C6:10:9F:1D:9C:0C:44:0E:FA:CB:4E:ED:44:C2:E4:D1:7F:DE
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial: 019A70DC08A6DB8B771EF84B37A1440F02A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number: 0985
Signing time: Tue 11 Nov 2025 03:00:59 +0000
Manifest this update: Tue 11 Nov 2025 03:00:59 +0000
Manifest next update: Wed 12 Nov 2025 03:00:59 +0000
Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: D6FVyX218hlZq2l3E5UF1/70Ff4EQ4m++BFzVMCSYtc=)
2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:08:a6:db:8b:77:1e:f8:4b:37:a1:44:0f:02:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
Validity
Not Before: Nov 11 03:00:59 2025 GMT
Not After : Nov 12 03:00:59 2025 GMT
Subject: CN=be24c6109f1d9c0c440efacb4eed44c2e4d17fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:ce:d4:51:58:96:97:41:76:85:c6:ce:2e:
03:56:35:9d:3f:b4:33:a6:3b:82:5a:3e:93:96:5c:
d8:5a:4c:8c:a7:9c:68:2a:ed:44:29:05:46:64:72:
32:08:a0:35:5e:93:be:64:07:90:2c:25:16:b7:df:
6c:25:d0:d9:0c:5f:7a:ff:90:f8:56:47:09:5f:60:
f8:e1:bd:41:70:93:bf:a1:2b:85:bd:bd:c9:15:56:
66:d8:d4:fb:bb:95:ca:cb:e3:35:60:0f:e6:77:b8:
9e:ac:d5:cb:9f:2a:bd:6b:0e:63:d7:9a:44:b2:a5:
50:8a:e6:cf:43:ad:fb:02:77:8e:fb:ef:94:eb:9d:
79:0e:67:0c:9d:13:17:41:76:ab:4a:78:fb:82:dc:
4c:20:4b:52:01:b9:bc:c6:1a:f8:4f:34:58:cd:ea:
ab:72:05:1b:1d:b1:25:6b:c5:7b:07:c6:95:0e:00:
bd:5c:61:a1:8a:f0:18:d8:c7:56:04:22:f4:e5:ef:
0a:60:2e:0f:a2:47:0c:c3:73:7c:2d:98:f3:96:96:
a9:7e:ff:a1:24:53:bb:9d:74:c0:a6:26:ab:49:28:
40:17:31:b9:ff:a1:ce:4b:00:f0:d2:11:0a:97:ed:
24:2d:a8:a4:bd:ef:18:60:c7:7d:65:85:ab:b9:52:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:24:C6:10:9F:1D:9C:0C:44:0E:FA:CB:4E:ED:44:C2:E4:D1:7F:DE
X509v3 Authority Key Identifier:
keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1b:b1:25:cb:b2:7e:c5:0e:6d:3e:51:68:f4:8f:ab:db:cb:
62:8a:f6:28:fc:21:3d:55:2a:e5:10:c6:f6:b9:1d:2b:3f:55:
9a:11:1d:1e:83:87:2f:a7:65:42:70:f7:ea:fb:27:b7:e0:66:
d0:5d:45:42:1b:5f:17:c4:ea:a2:17:a5:e3:c9:45:01:ff:03:
3a:61:a0:3a:30:3d:a6:05:b3:3f:c0:e3:30:fb:f9:b2:d7:fb:
56:cc:ae:ce:f5:5a:76:9b:c1:71:2d:f6:0f:3d:48:3b:e0:4a:
76:ca:80:7e:07:67:0d:12:c1:c5:b2:ea:29:35:f9:89:97:1b:
34:61:42:94:84:80:ed:7e:2b:be:eb:5f:eb:61:82:7d:e0:65:
64:c7:f5:0b:92:75:5f:ca:90:95:29:76:87:0d:18:09:29:48:
86:c5:4c:69:e1:a3:1f:8d:b3:68:2b:14:50:97:0b:86:da:ce:
29:1b:dc:c7:cc:60:71:69:30:04:16:7a:e5:1e:c0:08:df:0d:
7a:ea:9e:3a:ad:23:5e:c8:cf:5e:b4:49:32:01:82:05:9a:2c:
fe:70:f9:f7:59:52:d2:03:c0:d9:65:66:ec:87:c9:77:65:fe:
b3:1b:e6:24:b3:30:35:0a:b7:aa:be:55:ff:ba:c9:52:68:87:
78:cd:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client