Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: 1xF6QmiGxym505dbR/4DHy/QdK005oJCC1xGTX5Gq2M=
Subject key identifier: 53:52:15:BA:A6:6C:8E:71:2A:EE:41:91:BE:9B:2A:23:E9:15:85:AA
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019A70DC706228A85218DE080500CB8A98F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 1497
Signing time: Tue 11 Nov 2025 03:01:26 +0000
Manifest this update: Tue 11 Nov 2025 03:01:26 +0000
Manifest next update: Wed 12 Nov 2025 03:01:26 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: R54AyBNTmelOIn/zAbLxbv2WX/MVEz0x7T1p0w9lAb0=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:70:62:28:a8:52:18:de:08:05:00:cb:8a:98:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Nov 11 03:01:26 2025 GMT
Not After : Nov 12 03:01:26 2025 GMT
Subject: CN=535215baa66c8e712aee4191be9b2a23e91585aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:52:ef:29:f4:00:bf:9b:ef:ff:0f:2e:df:
af:b0:89:c5:19:24:98:f7:ad:c4:1c:58:03:e3:10:
fe:9b:0f:2e:0b:fa:de:fd:21:9d:36:fd:9d:01:a3:
77:17:89:ce:74:f8:de:92:9b:83:7f:fb:04:61:4c:
a4:de:94:4d:94:7c:18:63:dc:23:b5:b9:e5:f3:c7:
a4:aa:b9:f9:46:8d:3d:eb:22:72:3d:2a:05:a8:f9:
6b:8e:0d:69:de:e8:77:3b:fa:81:3e:dd:38:d3:4b:
dc:f5:fe:70:86:38:77:29:52:98:af:b9:39:71:57:
fa:2f:39:80:92:f2:18:38:6e:1e:4f:b2:c9:2d:e0:
c1:35:d1:35:71:12:e2:b3:c2:0d:54:0e:7c:e1:08:
a4:2c:f4:fe:16:14:78:3e:5a:0d:a7:44:ef:d9:b9:
5f:46:24:dc:40:10:f5:8a:f8:cf:07:ed:21:ec:aa:
8e:b6:42:2b:db:04:b1:d3:39:0c:8d:3f:97:69:9c:
65:7d:ef:bc:56:6b:42:0c:11:46:7a:f1:e1:73:4f:
2e:d0:68:ec:db:3d:38:17:80:a0:ae:d3:bc:3f:31:
7d:8b:c3:32:1a:3e:aa:a1:ee:70:68:94:ce:67:5e:
48:a0:0e:b0:b2:35:0c:21:4f:ba:c6:87:3e:db:58:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:15:BA:A6:6C:8E:71:2A:EE:41:91:BE:9B:2A:23:E9:15:85:AA
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:96:80:3f:f0:0d:f6:66:13:87:d1:68:89:98:a8:dc:65:
fc:2f:26:12:b1:e8:fc:81:2f:b0:d5:f9:b1:78:7c:ae:5a:81:
2b:14:ca:77:c5:59:3b:23:b5:dd:b0:2e:53:6c:5d:29:aa:e5:
8d:af:75:ac:51:90:7b:92:76:ba:f0:90:d2:95:c9:3f:48:dc:
22:7f:59:e9:70:c6:c5:c6:df:c5:44:29:68:90:10:f0:1b:78:
9b:9c:1b:89:8f:bb:44:3f:d8:bc:a9:c3:f7:aa:98:c8:6b:ac:
fd:44:0f:02:32:cf:89:b5:f4:d8:22:45:04:c5:63:58:19:80:
12:18:f6:ac:08:38:79:c1:9d:74:43:00:58:c8:30:6b:21:a9:
db:7f:f9:74:e1:95:c0:7c:8c:eb:9c:85:7a:a7:be:66:9f:29:
ea:e0:0b:73:b4:c3:8f:7c:55:da:6a:2f:2c:a1:37:cd:5e:df:
25:f4:ea:cb:ed:5a:d1:6e:6f:a3:0c:d5:79:42:ed:f0:c4:d2:
5d:9c:cb:22:b8:f9:b4:b8:40:37:6e:f5:13:09:dd:f9:87:a9:
c7:fb:b7:d6:a1:f6:9c:93:89:87:88:49:9f:32:75:db:2d:87:
9a:15:bc:d7:89:e1:47:04:8b:12:44:b1:3a:00:d2:4e:14:df:
fa:a1:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:57 2025 by rpki-client