Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: 2ARZJbiKXTkS1ieAGPs4/32nix0mJsLaB/Et30WYKTw=
Subject key identifier: 80:68:68:90:89:8F:D0:C6:C6:4B:25:5B:6F:8F:3B:9F:8C:A4:3E:3C
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019A7225EA113C479A7480E1185E200910AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0510
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=)
2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: YUcJVioI2aVDmcdhELpbMeaiT1amjEWUrbb0cPt0DjA=)
3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:11:3c:47:9a:74:80:e1:18:5e:20:09:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=80686890898fd0c6c64b255b6f8f3b9f8ca43e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:c8:27:4b:17:01:24:ac:ae:74:82:8d:47:
c0:1d:3e:bb:b5:cc:1f:27:0f:e1:33:67:c3:2c:28:
f2:1d:1c:0f:67:6b:7d:ed:7b:0c:b9:b5:9a:4a:8c:
e6:5f:02:0b:92:34:28:4c:c4:89:6f:cc:8c:55:2d:
44:eb:b8:4b:d0:83:46:c5:3d:c5:12:db:6d:14:65:
ca:5f:cc:ea:71:cf:25:12:55:4d:dc:2a:b0:49:6d:
fa:be:b1:12:d1:7c:13:aa:b1:4c:7b:2d:05:4c:62:
26:7d:07:6c:63:9d:8f:2e:be:35:a7:c2:b8:9e:84:
80:1b:b5:26:1c:bd:8a:e8:5b:2f:a6:e1:ce:3e:13:
62:71:07:af:f7:d4:23:56:12:a1:f3:27:3f:5b:a3:
cb:48:0f:57:90:51:dd:21:23:38:60:db:3c:97:3c:
d9:f8:9a:8e:cd:3e:c6:3f:dc:22:43:97:2f:b4:b6:
6e:70:c2:a5:85:74:30:31:e7:14:7f:fe:82:d5:9a:
86:b2:fe:e4:ce:49:72:29:78:9a:bf:eb:f1:22:4e:
16:79:ac:1f:b7:ca:92:c8:04:97:e0:b8:0b:27:98:
0b:74:6d:0c:c1:d8:e0:f2:17:72:9e:e1:1c:2a:fd:
2a:87:af:cb:19:35:5e:60:62:1b:17:f2:39:37:4c:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:68:90:89:8F:D0:C6:C6:4B:25:5B:6F:8F:3B:9F:8C:A4:3E:3C
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:dc:78:bb:b3:75:48:4b:66:57:5a:48:cb:d4:c7:64:22:
20:8f:b0:d7:11:7a:00:0a:7f:4a:b3:eb:9f:25:e7:23:b0:8a:
e5:2a:73:c8:d1:ca:03:3f:6d:10:62:8e:a0:fb:b8:6d:7d:5f:
62:4d:b0:4b:d6:c7:86:19:17:69:08:1c:ac:25:9b:89:49:a9:
b4:a0:54:9c:8e:4d:bc:3a:7f:56:e7:02:ed:68:8e:30:b5:1f:
79:df:eb:8a:d5:76:c0:42:51:ce:17:43:b4:ee:91:65:20:14:
ea:df:64:c1:83:49:70:a6:1e:14:ed:05:93:cb:78:92:c7:4f:
61:5d:61:9f:98:b3:42:2d:a0:6f:28:94:f0:ad:3a:7a:3b:7f:
d8:f8:09:14:30:c5:37:f8:07:53:8a:26:b9:22:17:5b:9d:0a:
88:9c:d2:19:28:96:bf:0b:c7:84:a4:a5:00:64:9e:94:45:14:
b2:08:5e:29:b9:96:12:c3:4c:e4:ec:5f:3d:83:5f:13:50:24:
a3:45:f7:4e:e5:25:ee:4c:a1:b9:84:f2:1b:e5:b1:36:c9:52:
16:43:5e:54:7d:72:9c:ed:07:41:f2:e4:d7:6c:49:bf:38:e4:
b8:57:71:97:9b:5f:16:ad:ea:82:1d:fa:ab:0c:9f:ce:a5:44:
45:d0:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:44 2025 by rpki-client