Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: hXZahnKPbBu2S9rmbeOosVRMPnYAQjWg8pVDY3IINoY=
Subject key identifier: F1:54:B5:1B:2D:66:8A:C4:B8:23:DB:6D:58:77:B0:EE:06:5B:0F:00
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 019A71B91A0D7E0D1A90C8E3AEA8131723F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0FB7
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: HMoHxnp4UBtZIEo2to0No9F1cTGn42HdmhoF/F1a/io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1a:0d:7e:0d:1a:90:c8:e3:ae:a8:13:17:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=f154b51b2d668ac4b823db6d5877b0ee065b0f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:57:9b:95:e5:61:7d:e3:72:ba:9c:fc:8d:
a6:4e:53:3e:35:80:d7:bb:5a:ae:04:7b:2b:b7:09:
e5:2c:36:34:5b:34:5e:52:f8:11:f8:76:80:a6:b4:
1d:59:eb:32:9e:e1:85:d0:f6:81:29:78:99:c8:e8:
70:14:8c:27:1a:7d:4b:65:c2:bf:ae:09:75:9a:36:
34:1f:35:1e:60:b8:eb:4a:80:2f:a6:36:9d:36:13:
19:26:5c:41:b6:8b:39:48:5a:db:00:c6:15:7b:75:
5d:a1:8c:af:24:79:6b:62:22:a3:85:25:ce:8a:14:
16:8f:36:3a:66:9a:0a:bc:8c:85:56:63:1b:98:45:
8f:53:d4:5d:59:26:ea:78:33:4b:78:ac:11:5e:9b:
18:17:48:23:b2:a7:04:3a:b1:a1:e9:19:a8:b4:cd:
a3:24:66:72:f0:4c:dc:6e:d6:ee:ef:2f:4c:3e:4b:
b0:e8:e4:2c:66:4d:83:54:c9:8e:9d:49:60:56:92:
eb:b3:85:fd:39:ab:c4:66:b5:5b:d9:0e:ba:d4:46:
86:15:ed:e9:3d:ec:f7:3e:f0:7b:66:ed:c4:7f:9e:
52:6a:48:dd:e8:e4:1a:70:1b:2e:ec:d1:8b:36:d1:
9f:96:f0:bb:b2:72:c7:95:17:0a:1e:c4:8a:d5:62:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:B5:1B:2D:66:8A:C4:B8:23:DB:6D:58:77:B0:EE:06:5B:0F:00
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:11:08:35:35:c8:4c:cf:25:ec:fa:c1:da:ca:03:76:30:d9:
fa:a3:a0:b5:69:24:ef:ae:85:ff:6c:92:5b:43:f9:58:05:9f:
26:cd:1d:b7:3f:c0:24:7a:91:07:9d:80:6e:27:6a:88:5a:2f:
42:03:df:4b:57:e3:d4:2e:f0:80:cb:ca:f7:d0:a1:02:f8:ec:
76:36:7e:59:3a:17:53:60:99:d0:87:06:81:a6:46:61:2a:d4:
10:db:7a:93:bd:b9:bb:f2:ea:ad:2d:a2:dd:8c:d6:32:4f:ea:
16:a1:c3:b5:12:11:a0:9f:74:08:5f:7c:96:d4:44:49:30:c1:
46:25:b3:50:1a:76:5a:f4:75:74:9b:aa:55:e5:b1:b6:0c:24:
5f:d8:f5:15:0b:fe:a3:39:21:38:58:e2:a2:98:a2:7d:24:18:
b9:36:d6:30:cc:0c:fc:6d:2b:a5:e9:98:37:97:08:96:bf:b3:
75:91:9b:d0:55:48:b1:ff:20:bb:1c:88:12:8c:4a:95:71:70:
fc:0c:61:09:bd:25:f0:51:f3:bf:d2:90:cf:69:74:12:b4:59:
74:bb:12:e9:cd:df:53:e2:44:fe:a9:91:42:57:19:0b:5d:66:
06:95:68:ba:65:be:b2:b0:cb:d3:13:d2:fa:d8:f9:54:af:31:
99:b8:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:37 2025 by rpki-client