Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: cYHF2CWYKX73LxpKutaWWKQaZNgKYFBWTnQvHK9ayt4=
Subject key identifier: AB:38:6C:7D:62:6E:02:94:38:B4:83:BB:F6:81:96:FD:F6:C3:F4:F9
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019A04ECE27754F1731BD0C46BD33AC1DFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0A48
Signing time: Tue 21 Oct 2025 04:00:24 +0000
Manifest this update: Tue 21 Oct 2025 04:00:24 +0000
Manifest next update: Wed 22 Oct 2025 04:00:24 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: bD5Kf2nzYAu5zFQx3swyPU86i3Ww3Ueydkez9WYAeu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:e2:77:54:f1:73:1b:d0:c4:6b:d3:3a:c1:df:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Oct 21 04:00:24 2025 GMT
Not After : Oct 22 04:00:24 2025 GMT
Subject: CN=ab386c7d626e029438b483bbf68196fdf6c3f4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:cc:a5:47:b2:25:2b:d3:a9:41:80:40:7b:
9c:19:23:15:84:fe:b9:b7:e6:6f:2f:cf:59:46:dd:
a8:5f:81:04:05:35:fa:fb:32:ea:2e:02:0c:39:2f:
4a:b6:30:6e:6a:c5:80:46:55:a3:6c:5f:75:f9:48:
e4:1c:06:b7:d0:80:4a:fa:5d:64:9c:26:53:3e:a0:
a7:0b:ba:1e:da:63:3a:ae:f5:9d:8f:e9:0c:a6:9e:
37:6f:a9:d6:07:f9:17:9b:39:53:25:16:ef:b5:b7:
d7:50:8f:c7:5c:07:8e:02:4c:2f:65:5d:16:e1:b8:
64:f2:c7:60:0b:e5:93:e5:a1:19:53:c0:2f:94:a4:
bc:1a:75:0b:32:be:9e:1a:63:ab:db:5a:80:fc:c1:
d6:cb:e7:fc:16:55:03:b4:79:ea:97:15:ee:9c:f6:
ec:32:8d:06:6e:04:8a:d5:ed:16:97:16:cd:3a:16:
f3:4d:19:8c:2e:29:3f:87:c1:09:61:5b:f7:fc:e4:
ea:f5:d1:f2:5f:58:e6:e8:9f:da:c6:49:6e:44:21:
47:c9:55:87:2d:44:4d:c6:53:eb:60:17:57:b8:f7:
dc:f9:9b:04:fa:19:29:6e:31:6e:c3:73:71:ae:88:
b8:d1:f0:32:34:dc:35:7c:3d:5e:3b:ce:c5:0a:d7:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:6C:7D:62:6E:02:94:38:B4:83:BB:F6:81:96:FD:F6:C3:F4:F9
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:0f:65:6c:e6:91:8a:98:ed:31:2a:13:ba:1f:fd:c0:41:
59:cb:3d:41:8c:eb:92:e0:f5:c8:4c:55:16:96:a2:0b:2c:26:
37:70:36:46:36:6f:fb:f0:43:f1:9f:9c:ea:45:2b:78:cb:f8:
6b:71:18:65:c0:07:88:83:2d:56:e4:62:ac:6f:2e:49:c6:3f:
dd:09:a0:f7:2b:65:44:62:39:1e:f8:cf:c5:c0:a2:74:89:74:
0e:48:4c:be:4d:ff:cf:4f:ce:5f:51:38:e6:45:f4:d8:4f:c6:
b7:e6:c3:85:64:43:76:09:ed:e0:cc:e8:ef:ec:48:33:d1:95:
c5:5e:6e:95:02:21:c3:df:d2:20:8b:98:68:8e:f2:74:94:73:
74:5c:16:13:71:5a:4d:ca:e4:b7:d0:27:24:c5:5e:bb:61:9a:
c6:05:ee:1e:5a:93:6d:e9:6d:c0:54:d3:46:e4:09:13:74:0c:
7e:63:22:cf:63:54:c4:39:29:e1:6e:1a:05:1d:1a:7f:1a:40:
c7:3a:35:3a:03:85:35:03:86:f4:5f:1d:18:dd:e0:76:e2:06:
9a:dc:82:70:72:12:8b:35:0b:7d:4c:c4:84:ea:34:2c:70:52:
b0:85:6e:8f:83:f8:bb:b6:9f:f9:c0:ab:0b:d5:7e:a5:56:c5:
16:f3:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:18:52 2025 by rpki-client