Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: iIBwKJThLeBKDse2zoQ0aIhVmWRPIRcjDtupeHuNPd8=
Subject key identifier: E9:D5:AC:69:FD:AC:42:C0:4F:29:02:09:68:ED:44:96:D7:65:34:44
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 019A23D2F226A103077DBD80EB8F07277EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 5D
Signing time: Mon 27 Oct 2025 04:00:18 +0000
Manifest this update: Mon 27 Oct 2025 04:00:18 +0000
Manifest next update: Tue 28 Oct 2025 04:00:18 +0000
Files and hashes: 1: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: neaAs4A4RPWL88P2PY3D12pVH0M0cGCrThyF68TKpNs=)
2: qfuhRedqUPpNTA86T-6bb6nkpoU.roa (hash: n2+GEGHXXGKkmerP/9dENHzgRYY7IxvI5R7IJ6va0DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:f2:26:a1:03:07:7d:bd:80:eb:8f:07:27:7e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Oct 27 04:00:18 2025 GMT
Not After : Oct 28 04:00:18 2025 GMT
Subject: CN=e9d5ac69fdac42c04f29020968ed4496d7653444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:3d:1d:ce:08:2a:ad:a8:fe:c7:40:3b:e9:
df:37:93:7a:d8:f1:94:7c:31:4f:c3:eb:33:7e:d6:
0b:c2:60:8e:2f:6c:69:60:c5:0b:38:aa:51:78:1a:
f6:de:6c:ec:9d:73:15:e7:df:00:7d:da:0c:ea:ba:
94:e7:21:8c:40:e2:b6:86:a2:38:3c:db:51:9e:10:
7b:d0:4b:c2:f6:8d:af:72:5b:33:b9:2f:54:21:2e:
ca:76:43:57:8d:29:b9:ed:9a:93:02:fd:80:0d:01:
0e:88:db:fc:b6:6a:c0:3b:1a:13:0b:b1:cb:18:cc:
58:da:ca:31:e1:75:9b:99:5f:8d:32:78:f3:c6:35:
e5:1e:8a:c6:b6:52:dd:b6:8c:90:26:ef:7a:c9:0a:
62:12:b6:27:1b:63:d5:27:f9:4a:05:d0:33:f1:8e:
4f:65:55:37:8d:19:d0:13:7f:20:75:7f:0f:ce:a2:
32:40:49:77:08:e8:93:89:0b:07:fd:c7:52:07:0b:
5a:0f:07:20:c5:fa:ef:2f:8b:65:a7:f5:71:77:24:
71:ab:73:b3:19:8e:d9:92:e0:a0:82:99:b5:09:1a:
a2:a9:01:fd:8a:f2:0b:59:63:80:a4:ee:ae:d3:93:
89:9e:4a:be:62:09:1d:4e:14:8a:8d:1f:6c:52:71:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:AC:69:FD:AC:42:C0:4F:29:02:09:68:ED:44:96:D7:65:34:44
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:25:04:73:69:23:f7:c9:aa:e6:76:0e:c9:8e:5d:ec:c8:
c6:bb:06:c4:91:e8:a9:e1:e1:d8:c9:94:6c:30:33:ef:57:85:
02:78:4e:6a:5f:18:75:03:0e:03:c9:35:f7:ac:1b:d3:a9:08:
04:6f:2a:c6:ae:80:c6:26:3f:97:cf:ab:9f:25:c9:25:31:44:
f7:93:bf:fe:06:9b:bb:6b:4b:fd:ef:b4:91:f1:7c:04:0d:2c:
84:6f:3b:5d:f3:81:12:22:a6:ca:bc:7b:a1:bc:36:42:2c:d7:
2d:ba:14:62:d1:aa:80:c3:2e:1f:e7:76:79:5c:0c:d7:70:ed:
b1:28:f7:fd:bb:b4:98:35:5d:0c:04:8b:b9:5f:23:fb:da:40:
c1:36:6c:41:44:7c:59:e6:f2:e7:5a:3c:21:24:b1:c1:1b:54:
86:b8:57:51:43:48:66:df:d1:14:ce:97:e8:c5:e3:5a:60:cc:
94:d4:35:e1:01:30:f2:1e:19:87:20:24:98:52:c8:2b:d9:5f:
b2:9c:01:ef:10:e4:fc:f8:ed:4e:52:bc:2d:d7:1f:7e:c1:b9:
3e:c0:f3:d8:d8:1a:5e:a2:04:0a:21:51:32:70:c4:56:2d:c7:
0c:1f:3f:7b:c0:63:8d:f4:91:57:84:da:74:02:81:3e:b9:e6:
19:6b:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:20:55 2025 by rpki-client