Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: 12vreRYhxkdeq2qr0WYMLZqxt+SWeSiUZny7F5zSoJ8=
Subject key identifier: 23:64:C2:D0:7B:B2:C5:1D:7F:A9:1A:8F:96:82:3C:06:73:AF:06:53
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 019A71B8E44E0B19D6BFE77EF3C73641982D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 14AA
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=)
2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=)
3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: cEB+usQH2nptEtZZTUPisFdc2gGm4ctW4NAPDLdY34k=)
4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e4:4e:0b:19:d6:bf:e7:7e:f3:c7:36:41:98:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=2364c2d07bb2c51d7fa91a8f96823c0673af0653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:fc:7b:80:94:90:dd:08:86:e1:c0:29:4b:
07:46:45:df:d7:59:fe:35:5e:4f:e8:75:bc:ab:72:
73:56:a9:54:71:4f:83:af:52:00:3d:22:bd:f2:fe:
82:ab:1b:82:40:99:33:75:7c:9e:1a:2e:01:09:c8:
03:ef:76:2e:b4:8f:47:5f:71:70:3f:86:54:64:05:
32:8f:8c:46:7a:c7:4e:41:d9:13:f8:f3:4a:30:f4:
7b:3b:58:10:01:69:86:28:c4:1e:87:ad:2c:07:c3:
da:06:98:3a:f0:5e:5c:a7:d1:ba:c5:c5:da:e1:e9:
94:c4:92:0f:d0:ee:45:4b:fe:e4:6f:1a:15:44:81:
30:a9:04:70:7d:7d:e4:61:31:22:ed:8e:c2:5b:77:
51:22:d2:00:e7:52:35:1b:4a:55:15:dc:fa:84:0d:
a5:2e:50:76:39:7e:38:f5:9b:6a:c8:5f:08:87:b7:
df:12:00:b3:ed:32:b0:d7:0d:fa:1c:62:7f:e7:94:
b2:93:5c:8b:f6:5c:d4:f9:ff:8c:09:09:d8:4e:f5:
73:47:e2:9d:46:40:0b:a9:a0:98:7a:06:b8:ec:63:
0b:fa:29:71:af:ff:e8:ba:bd:80:bc:38:cc:c5:52:
8b:68:39:00:cc:65:c4:03:62:c4:d6:db:de:a8:5e:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:C2:D0:7B:B2:C5:1D:7F:A9:1A:8F:96:82:3C:06:73:AF:06:53
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:23:ca:68:bd:51:cc:58:d0:e7:4f:59:ef:30:68:62:e1:4e:
09:a4:95:42:5a:7f:56:a6:f3:e0:79:ec:f1:70:f5:76:d7:10:
03:3e:ea:9e:c8:09:cc:9f:09:a7:a3:e9:e0:02:85:a4:e6:d0:
8e:e4:b6:7d:18:36:be:37:62:f3:27:2f:a8:93:d7:31:61:b0:
af:81:f6:06:3a:4e:24:31:35:9c:a2:14:c1:2c:df:90:a1:08:
c8:0b:32:87:87:31:74:fe:b4:59:d2:31:43:7a:48:23:49:3c:
56:d7:e3:7e:bb:df:1a:c4:e8:74:60:15:be:c0:71:b0:96:8d:
a5:ab:2c:aa:cb:0f:27:43:aa:33:9a:47:2a:2b:ad:8c:af:55:
d6:8f:f0:72:44:84:eb:ba:09:e3:02:60:f4:e1:fc:68:cf:30:
63:94:30:a5:0c:66:64:40:db:32:87:dc:77:61:7c:f8:96:ce:
0a:ca:07:9e:2e:b3:9e:9d:6e:27:fe:04:67:ac:0a:cf:7c:84:
01:6a:eb:c6:4a:8d:cf:87:16:58:06:08:af:7e:2d:76:3c:8e:
ca:bd:12:de:cc:6a:81:f9:66:06:28:24:73:00:d2:75:c3:15:
3d:11:08:7c:08:e6:43:c3:ce:73:44:bb:e6:7e:61:82:9c:16:
2a:a5:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:24 2025 by rpki-client