Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json)
Hash identifier: cOPU2Bo1NvGWgXTo2+Kdr04lLUocLFeQkGnxs5nwdgo=
Subject key identifier: 05:70:34:FB:E8:83:6E:2C:4D:E3:94:0B:38:AA:F1:3A:7A:02:AC:7F
Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Certificate serial: 019A7112A8A2B7C0C44ABC4009D9164CA8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
Manifest number: 0144
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: R37z7z3UMSOHxREcNo2d4J0GLDX+Cd+PGXvTnJ8PQxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a8:a2:b7:c0:c4:4a:bc:40:09:d9:16:4c:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=057034fbe8836e2c4de3940b38aaf13a7a02ac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:c8:f5:30:f6:6b:7c:7d:b9:a7:fb:82:ef:
b2:f9:fb:91:fe:b9:60:bd:0f:41:e4:81:73:70:a7:
9f:7a:1d:c2:73:5a:c8:a9:ea:2e:32:32:cd:c6:79:
72:37:c2:7a:8b:7c:2b:7d:64:0b:83:44:7a:60:b9:
1c:23:b4:4c:b5:96:41:28:83:67:6b:2b:b8:d3:1f:
09:1d:87:df:b8:20:26:ea:dc:ba:e3:cf:a2:f5:08:
fd:7f:86:51:16:8f:90:40:05:40:a8:b3:40:30:45:
a2:d8:36:22:ab:1a:3f:2f:ed:b3:88:3a:02:28:a5:
59:ef:2a:75:ef:be:63:ed:74:fd:6e:1a:b8:9d:24:
b3:a0:cc:e5:61:03:5d:56:7c:ab:87:81:d6:e7:9b:
ab:29:5b:ca:99:06:73:50:ca:10:dd:a6:9d:24:01:
57:62:8e:2d:57:a6:38:4d:6a:06:dc:b9:71:72:8e:
ff:05:88:1f:49:71:e9:fd:5d:46:eb:e7:d5:7a:bb:
6d:a4:76:76:51:0a:a7:22:7b:ea:6e:23:46:4b:c3:
64:16:f5:5c:07:65:ad:17:4e:e2:6b:b8:82:ad:3a:
7f:df:63:b9:40:3a:19:75:e1:a5:9f:61:43:c5:28:
33:12:b2:c5:8b:9e:b4:9a:41:68:4f:84:54:8c:71:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:34:FB:E8:83:6E:2C:4D:E3:94:0B:38:AA:F1:3A:7A:02:AC:7F
X509v3 Authority Key Identifier:
keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:83:9f:1e:95:43:8e:d5:d8:77:68:d3:2b:98:7c:c9:29:
32:0e:9c:af:fd:f3:a3:c9:12:29:3a:14:03:1d:a4:f9:4f:83:
55:f0:62:75:ba:c6:14:56:7f:9b:ea:47:48:a1:06:58:4b:aa:
90:7f:38:19:76:5a:b6:0f:d3:7c:58:83:97:17:f0:c5:6f:11:
8a:76:b1:6d:f4:4c:f5:94:87:cd:6f:38:6d:f7:d2:0d:b9:a5:
db:3d:72:d2:35:9f:3e:d4:3b:5f:23:c3:be:d8:72:c4:e7:aa:
60:53:61:1a:d6:a3:fc:a4:01:39:bc:84:86:e2:cd:06:82:9e:
92:f5:4f:87:ee:15:a1:e8:ef:3b:92:a7:0f:3c:ff:61:19:6a:
23:bc:c9:e7:bf:0c:30:b8:a6:07:64:0a:67:0e:1b:e9:ef:51:
12:fe:1a:d2:13:91:b4:1f:bd:13:cc:c3:3c:d8:98:06:11:ab:
06:81:3e:a3:22:0b:b5:eb:ec:69:d9:ff:2f:f7:b6:51:a6:9c:
11:23:71:95:0a:21:d0:f9:db:39:ac:ed:8c:b8:a4:ee:42:7f:
4e:4b:0b:35:df:1c:b9:74:70:f7:c2:88:b7:e4:5d:f0:7b:ba:
f6:c7:4f:22:fa:25:7f:9d:f6:52:71:bb:02:12:f1:56:d2:c2:
08:8f:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client