Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: btxlgNYuUJuRyGDsaNl3GUJQmIukNOiLM4wRHeDYSNQ=
Subject key identifier: 78:AA:51:28:68:7A:B7:1E:6A:B7:84:D3:8C:E0:EA:9C:05:D0:8F:1C
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 019A71133D769A3B95B079C3778AB8777271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 8A
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa (hash: KmHgJDlPkXFpo1uiCXVfBs7N0PdhXHFV0wyXs4DH/BA=)
2: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: s+yhQ2hdGokZTQpmEjUI9wupSoCFbUJHBuWOIykdh8c=)
3: aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa (hash: MGV2Z9M1at0wNrbd7sJUTfzjsFPuLQEHyaT+MULw+wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3d:76:9a:3b:95:b0:79:c3:77:8a:b8:77:72:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=78aa5128687ab71e6ab784d38ce0ea9c05d08f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:01:33:33:fa:35:fa:3b:84:87:0d:32:0a:
f5:e2:b2:5d:c0:f0:5d:de:2e:da:49:b4:59:92:3a:
1b:3d:48:48:66:8b:ee:ec:39:c5:0b:ed:28:d4:a8:
ca:ed:d6:64:55:e2:ff:8a:5a:8f:a5:b8:d0:50:e2:
31:bb:22:29:83:bb:43:a9:96:7d:81:9e:af:d7:21:
7f:33:de:8f:8d:b4:e8:97:8e:47:50:a4:f4:a9:6c:
6a:13:71:3c:04:3d:e4:ed:f1:a5:80:ee:06:77:5d:
47:e0:79:12:75:c1:72:53:a5:c2:cd:89:59:36:47:
81:dd:06:b7:f9:1e:05:4e:b1:de:78:ed:54:4a:59:
39:43:f3:d0:d8:27:6c:e9:a2:f1:b9:be:3e:86:d0:
42:92:54:09:92:0c:eb:58:6e:e0:3d:ed:38:fc:aa:
50:28:8e:8c:15:bd:20:e7:56:30:55:7b:76:89:d3:
33:6b:c4:90:8b:fb:4e:80:20:26:c0:c7:22:a3:30:
e7:62:b4:a1:21:db:cc:e8:34:97:aa:42:e4:8e:b0:
40:af:5c:4e:f0:74:c8:c3:c1:2a:81:20:f1:72:d9:
f3:33:0f:db:84:ab:55:e6:ca:89:f6:70:48:22:ab:
2d:b7:72:84:ec:94:be:f8:87:12:39:33:34:17:83:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:51:28:68:7A:B7:1E:6A:B7:84:D3:8C:E0:EA:9C:05:D0:8F:1C
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:5b:6b:38:bb:e0:1f:e8:42:1a:3d:c0:c1:46:5c:85:7f:
10:b9:19:ef:d0:06:03:67:1d:05:fe:a7:9e:34:19:79:d2:fc:
47:ec:c9:c0:ec:e7:74:a0:ee:4c:01:2f:29:71:61:af:b2:bb:
35:3a:1d:75:42:ed:1c:6c:d8:8c:2a:1c:cd:de:df:b1:84:ff:
f0:52:30:d2:e0:8a:10:d7:11:38:32:c8:03:64:0b:39:1d:4f:
ba:8c:02:87:28:10:00:fe:b9:09:3b:ac:34:dc:0a:5a:5d:a7:
7f:be:ad:43:37:87:ef:52:c4:33:75:74:8f:7b:f2:b9:e0:67:
26:10:67:e6:ff:cf:90:d4:40:7c:4d:49:88:a0:50:07:36:04:
63:38:1e:85:f4:37:34:80:cd:fb:50:eb:3c:0f:01:60:f2:bc:
4f:b4:48:49:25:32:77:42:3b:da:6c:d8:9d:b5:a5:34:d2:2e:
33:cd:db:a2:29:a6:21:34:7e:81:93:b6:b2:3a:db:28:60:4f:
5a:91:00:56:b8:cb:09:39:fb:79:6a:d3:08:61:8f:f5:36:22:
b9:46:1d:f1:fb:c6:f5:e4:8b:d9:42:18:77:09:6d:35:c7:54:
9e:84:c2:15:c2:61:2b:e8:81:75:c5:75:0e:f4:1d:dd:f3:48:
04:4d:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:26 2025 by rpki-client