Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: jufaImVGHQvFI29cdZaQx847/Gy+o5zuULbysXwzgCo=
Subject key identifier: AB:4C:05:55:B1:D8:10:F6:FC:46:17:95:BF:70:B7:62:A3:90:7E:67
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019A1FBF64BE0F843ADC3CB890320F5856BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 15C6
Signing time: Sun 26 Oct 2025 09:00:28 +0000
Manifest this update: Sun 26 Oct 2025 09:00:28 +0000
Manifest next update: Mon 27 Oct 2025 09:00:28 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: WX2UJm21AK1lOFb0JtkohowyR/LEPfwiWx/MRVceXTM=)
2: kJ6ZzA1fcsMngPwnFcWmPQ2TpJY.roa (hash: spn1/mEz9B8AiCWdxXSLx/VFzig4ReQEdpbCrXX5I3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:64:be:0f:84:3a:dc:3c:b8:90:32:0f:58:56:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Oct 26 09:00:28 2025 GMT
Not After : Oct 27 09:00:28 2025 GMT
Subject: CN=ab4c0555b1d810f6fc461795bf70b762a3907e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:36:8c:ac:69:2c:10:4c:35:7f:bc:43:65:
12:b1:a9:be:16:b5:60:b5:1d:52:d8:cd:df:e6:a9:
93:b3:31:c0:ba:27:3d:0e:d0:c9:46:e8:a6:0d:de:
84:43:18:16:50:b8:17:ca:dc:74:dd:c5:55:e8:3f:
90:e0:da:45:ba:da:da:54:37:cd:23:6c:a8:ba:0a:
4e:ad:e9:f0:97:a4:1b:7a:6c:83:15:23:3e:31:89:
fe:13:da:83:1e:a5:d9:18:ed:c1:34:fe:96:6c:33:
c6:84:4f:4c:88:96:c5:4b:5b:dd:cd:4b:4f:8e:fe:
5f:21:5d:f0:30:6e:12:dc:46:8c:2f:10:e3:bf:5a:
ba:cd:84:f4:a9:cf:7d:41:6a:f3:b9:0f:45:ee:2c:
dc:f8:db:54:d7:6b:d8:57:0b:83:27:8a:a7:1d:b6:
d7:da:d6:07:c3:d5:3d:e4:9f:6b:25:80:a8:7d:e3:
9e:f0:6b:d9:97:be:05:28:18:45:91:eb:34:6f:1c:
1d:a1:d2:49:04:07:df:93:19:1d:5b:13:f9:3e:2b:
59:56:53:04:6e:b1:cb:fa:54:9d:97:bf:ce:be:ff:
19:10:53:9c:ab:02:a8:10:64:2a:4a:28:29:3a:6f:
cb:6d:62:34:f7:0e:0c:7d:99:24:89:71:65:97:52:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:05:55:B1:D8:10:F6:FC:46:17:95:BF:70:B7:62:A3:90:7E:67
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:d2:13:a2:47:c3:2a:29:90:52:0c:02:6e:d6:f7:d0:40:
0e:88:ce:ca:bd:27:ac:7b:7b:03:04:0d:f0:52:e7:66:bd:e9:
4d:25:db:e4:1d:df:7c:91:ff:95:da:47:45:6f:32:93:82:d5:
65:54:a2:a9:fa:cd:4d:44:ff:cc:0a:cb:9e:93:25:77:46:56:
ad:a7:43:eb:ac:8c:dd:ad:ca:ad:ab:ba:84:b9:40:a8:87:75:
f4:49:46:c6:15:bf:81:4b:79:7b:35:3a:b2:58:23:ac:43:a1:
ea:44:9d:04:61:aa:f3:f7:19:af:bf:f6:80:22:3c:5c:58:f0:
7f:82:b2:c5:fc:69:bf:d2:d0:ff:dc:13:21:35:91:c3:3a:e6:
58:79:a2:25:95:be:0d:4b:94:2c:4e:1a:2c:68:3b:90:54:aa:
f9:f8:ad:87:cd:77:ce:13:79:2d:9b:8d:b5:4b:43:84:92:a4:
f0:ab:58:d6:b8:0d:c6:3f:32:a8:e7:ca:af:24:71:1d:bf:08:
4b:88:18:21:58:71:2b:e8:11:7d:c6:98:32:34:fc:93:4e:6d:
29:12:a4:f4:eb:08:d5:55:d4:e0:03:1a:ca:94:e2:de:17:dd:
ac:70:85:80:1a:37:d8:ab:e4:27:58:37:e7:c0:a5:bc:ee:eb:
a5:a9:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:50:22 2025 by rpki-client