Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File: V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier: 5VaqEj/7AEZFn5eQq6d/KsfOnMVCQgLXvdzgUGFpi3Y=
Subject key identifier: DC:DD:B3:AA:7D:58:ED:53:5F:F0:C6:FB:43:3E:8E:A1:B1:7D:6C:D0
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer: /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial: 019A7112C1E15BD38F58A401294722732CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number: 10F1
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: J61W22rNG-zDQHqba8KpMVr9eOQ.roa (hash: egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=)
2: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: S6qSTAaR/+UFWziqSPFG2dczmptkzbfFQrfpow5kzGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c1:e1:5b:d3:8f:58:a4:01:29:47:22:73:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=dcddb3aa7d58ed535ff0c6fb433e8ea1b17d6cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:c0:75:8d:d9:c4:0e:db:14:8b:cc:05:3b:
b3:9a:51:6e:40:8d:b1:6f:a2:c8:82:2f:78:0e:91:
be:e9:dc:9e:7c:2e:0c:bd:14:b3:ac:9a:45:54:1a:
9a:ca:30:68:bc:f6:1c:f1:bb:d0:b9:58:81:c0:b4:
ef:f0:ba:49:9e:71:37:49:09:c8:b9:2b:db:18:32:
58:9f:71:7c:f0:8b:f1:ec:ee:20:54:e5:2f:cf:37:
8c:ba:d7:61:5a:8e:b1:ab:f2:59:9a:85:e2:24:54:
19:6f:7d:2a:80:b2:b9:c2:aa:b7:0b:d2:64:74:34:
fb:9d:dd:9e:06:45:ae:5c:8b:56:9b:b6:fc:90:c7:
df:3f:38:5b:4a:24:b5:32:5c:2a:33:e4:c5:a9:94:
b1:e8:29:d5:33:c4:44:a5:86:25:63:d2:5d:6d:6a:
1f:b4:95:0d:f1:3a:db:87:52:a9:59:42:16:14:fe:
9e:ad:df:72:24:73:67:69:8d:c3:ab:60:4e:73:ff:
02:0d:32:35:21:4f:34:d8:9f:6b:0e:38:79:82:e5:
8b:33:57:61:a1:87:7a:e9:a7:ff:0c:f7:ce:87:48:
0b:6e:98:f0:7d:cb:84:ee:52:fc:e1:5f:03:da:8d:
df:d0:db:0c:7e:c7:1c:5d:7e:81:3d:2c:fc:f9:7e:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DD:B3:AA:7D:58:ED:53:5F:F0:C6:FB:43:3E:8E:A1:B1:7D:6C:D0
X509v3 Authority Key Identifier:
keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:92:49:f5:a7:0a:7c:46:3a:ed:a5:0f:8a:ba:ee:d3:d7:
03:7b:fa:66:f7:e6:ab:bf:14:8b:75:9c:2b:57:85:f1:18:b2:
2a:b2:db:47:22:62:0c:37:69:05:33:a0:63:16:9c:93:d1:0a:
f5:a6:3d:da:cb:da:90:ee:98:7e:5c:be:fc:a9:b4:f2:f3:da:
42:34:85:7a:55:49:70:49:6f:b4:e6:5c:64:d3:51:38:6a:e1:
34:e5:ab:3f:cc:fa:b9:17:e3:0c:5d:c2:5c:81:e4:d0:48:95:
dd:b0:ee:a5:6e:90:94:27:05:b7:59:a0:1e:5b:d0:20:b6:8a:
5d:44:2a:f6:cd:14:60:ed:10:94:d2:15:21:6f:08:c9:80:b0:
52:8f:0e:0e:d7:b6:c3:b4:c1:96:64:ab:87:9f:64:5c:63:98:
09:4a:76:d4:86:66:d4:59:4f:38:46:6b:11:70:f8:b4:04:56:
49:cb:b1:07:c4:ef:7b:63:c8:25:8e:73:f9:d0:5b:1f:a5:0f:
7e:a3:6c:45:7a:fd:5e:26:bd:8c:f6:07:8e:fe:64:bd:5b:10:
74:cb:50:c9:3b:8f:c3:65:9f:01:61:b7:f3:50:26:2d:e4:36:
a8:2b:59:e5:47:be:da:5a:af:ac:12:66:e9:51:73:38:d1:c7:
89:0d:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client