Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: EXW8q7lSc0KOdu6raZcexd9ILaAeOyQeUW4ikZ9hU/8=
Subject key identifier: AD:36:AB:5D:81:3B:02:F6:6A:A9:CE:1C:52:B8:E2:96:AE:27:11:B5
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019A2DB207528842249D51CFB04AAEE6A610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 07D9
Signing time: Wed 29 Oct 2025 02:00:33 +0000
Manifest this update: Wed 29 Oct 2025 02:00:33 +0000
Manifest next update: Thu 30 Oct 2025 02:00:33 +0000
Files and hashes: 1: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: RCEz9sJg54gwaxCEItccqsQM5zrudp4dbmgBlJvvGtw=)
2: T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa (hash: LKcOl9u48RGXIFNErzIBt+0+CJzkc3SUSSRAWMDqgFc=)
3: gaLphM1A_moGiALt3CRC2ndoaVY.roa (hash: 3zCVRytJAz7EydYXmCr5U7I8CEvPHa4z1gbLc/C+dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b2:07:52:88:42:24:9d:51:cf:b0:4a:ae:e6:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Oct 29 02:00:33 2025 GMT
Not After : Oct 30 02:00:33 2025 GMT
Subject: CN=ad36ab5d813b02f66aa9ce1c52b8e296ae2711b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:a0:0b:e4:85:f3:c9:a9:c4:96:e1:42:a0:
6f:df:e9:68:e2:d2:f0:09:5e:0a:06:28:2e:e0:1c:
78:fe:bd:cb:50:27:fe:79:df:40:48:fc:31:5f:c8:
9f:8d:8d:60:4c:d3:e1:ca:38:63:90:f9:6f:e7:99:
37:c1:e2:88:d9:93:22:ff:28:f2:03:9d:22:f5:b9:
66:61:a4:a3:8b:62:6c:99:f1:7a:04:7f:30:ad:08:
6e:d1:80:66:68:77:29:31:69:2c:7f:62:38:c1:db:
2a:a0:bd:50:f6:03:e7:0c:2c:f6:7d:f6:8e:84:25:
2f:8f:e1:96:52:25:33:78:23:ea:7f:a9:30:98:a0:
3a:c6:bb:14:cc:49:c0:f8:75:e2:e2:c0:64:80:e8:
25:b8:52:ff:f0:e1:30:a0:02:95:16:4d:d0:2d:26:
bc:05:55:94:52:6e:99:6b:0a:fa:65:19:10:e9:f8:
ac:1c:81:7f:6a:2c:64:e1:d0:6f:95:42:7e:31:1c:
44:22:09:d6:16:49:1d:5b:a6:dc:7f:f0:64:d4:15:
4c:b1:1d:c3:bd:03:63:04:7c:8e:1d:86:ac:ff:52:
b4:f7:d5:bb:d2:fd:8f:14:90:aa:dc:0a:f6:74:3d:
77:6d:ea:93:5f:bb:7b:62:a3:4f:69:72:62:a7:a0:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:AB:5D:81:3B:02:F6:6A:A9:CE:1C:52:B8:E2:96:AE:27:11:B5
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1d:6e:1a:23:32:e6:14:59:ee:b0:9b:fc:a9:67:21:4f:a7:
76:ca:63:7e:16:93:64:77:44:0b:51:cf:a5:2a:be:33:51:39:
1a:90:27:1a:fa:0e:99:49:7f:71:24:d5:30:37:e3:26:17:06:
7b:7d:7e:8b:1f:e3:37:40:61:08:66:44:ef:d2:76:af:2f:2c:
a7:ea:76:52:41:b6:7b:15:94:34:7a:b8:ed:fc:d1:74:a2:37:
7e:c6:f1:b0:33:fd:86:41:35:5a:bc:e9:3f:94:fc:3c:f5:eb:
e5:5a:1f:e8:eb:63:6f:32:99:8d:99:ce:7f:9c:2b:a5:76:64:
78:8c:42:cf:3c:3e:e1:a9:8a:bd:f1:9d:b7:88:c8:95:59:29:
07:cc:d0:cc:b4:66:a7:9b:e5:ee:47:22:f8:21:de:bd:59:d6:
62:45:44:d8:1d:8c:a9:c6:a0:02:40:9e:0c:b3:95:ba:70:2f:
7c:eb:b1:46:1b:4d:e7:a0:a6:08:7f:23:c9:58:05:30:43:16:
f6:0e:88:b5:e5:c4:97:04:2b:48:9b:96:3d:4c:1b:5f:27:4f:
0d:89:39:fa:45:a6:08:58:c5:3a:b7:61:f7:46:57:e8:04:c3:
9f:45:50:c6:6c:61:a7:bb:0f:f6:2c:4b:9c:5a:eb:db:88:88:
15:94:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:49 2025 by rpki-client