Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier: CmDwZq7Dr1YI5uIhgUpdjHJt/HOmkhAepd+tJWSH1nM=
Subject key identifier: E3:4A:51:43:E5:BA:59:F2:BB:C8:6F:2B:6C:AC:D6:7F:DB:BE:A9:C0
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial: 019A7225BD6AE88798054A26AA6F269CA2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number: 0C04
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: hZFVY5aV+PGadJ/NdX/0xAeKCX0W8iCyDvphMx8wgpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bd:6a:e8:87:98:05:4a:26:aa:6f:26:9c:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=e34a5143e5ba59f2bbc86f2b6cacd67fdbbea9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:90:36:29:89:0c:2f:c6:21:73:54:73:13:
4e:a9:bf:2d:da:aa:9a:f4:d7:74:9f:ca:91:c2:42:
0c:6d:02:60:dd:88:ba:9c:3b:2f:5b:24:9b:59:8e:
1c:c7:b9:5e:06:72:9b:e5:60:f0:aa:13:72:e9:f6:
d6:d0:06:83:50:e6:87:5f:d9:04:2f:da:04:3e:71:
68:6c:85:70:61:fc:68:36:62:56:50:09:ed:66:1f:
4c:6b:97:1b:33:9e:07:69:4c:77:20:e7:a9:ca:a3:
2f:7b:b8:b2:91:ef:ec:9d:1e:45:97:59:c4:8b:31:
1c:c6:d7:8d:78:c3:a7:20:2e:0a:76:a6:05:4f:40:
ac:25:c0:ce:44:7c:c4:3f:b4:83:3a:9f:fa:ba:86:
bd:bb:96:1e:dd:3e:17:0b:f4:23:39:e7:2a:07:cc:
1a:49:49:54:b3:2b:02:e8:a0:38:a4:00:ed:b4:bd:
9e:7e:c3:12:89:75:57:de:5f:0f:59:a6:75:5f:b5:
9c:5a:b2:ba:5b:83:70:12:b1:a9:04:a2:9a:9a:3f:
9e:89:f7:59:e2:bc:3a:db:03:82:46:7d:84:8f:3e:
e5:4f:f1:50:0c:c1:40:e4:d9:cb:69:7a:9f:ea:7e:
b1:df:0e:09:05:14:30:0f:89:cb:fc:c6:f5:96:89:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:51:43:E5:BA:59:F2:BB:C8:6F:2B:6C:AC:D6:7F:DB:BE:A9:C0
X509v3 Authority Key Identifier:
keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:d8:cf:cf:51:d5:eb:9d:a3:41:8d:69:44:29:60:94:72:
d2:52:bd:30:7a:15:17:3f:30:79:a2:3c:28:a5:40:3a:0e:00:
df:7d:f3:be:c6:28:d7:ac:f5:dd:5e:0a:71:e6:dc:1c:f9:32:
5e:6e:65:5c:05:ec:3b:6c:f9:f1:e6:25:a6:84:50:cd:49:42:
f4:31:d9:c0:e1:4f:d4:08:5c:38:6f:77:de:ea:8e:b5:1a:8a:
ba:85:38:2c:d6:b5:ba:62:fa:2f:76:10:e4:c8:6a:18:9e:97:
2b:1b:76:ea:97:4e:31:a6:0c:78:02:fc:d1:a4:18:23:4c:73:
3c:42:b9:39:1c:96:4a:b2:54:78:a5:2c:dc:2f:97:f6:dc:a2:
6d:2d:04:72:1f:91:4e:b0:1f:a4:5b:d9:1f:22:df:16:51:03:
f6:f2:65:67:ec:b3:b6:66:37:05:3e:e6:ef:be:96:52:38:44:
a5:90:cf:b8:94:fc:26:24:17:c0:e1:9a:95:97:7d:d9:0e:37:
5d:34:bf:d3:d5:89:45:89:b3:49:8b:29:21:3c:55:82:2c:0d:
b5:b2:af:d5:32:b6:68:7b:f3:81:c8:b9:87:1d:a6:3e:7e:80:
f1:79:30:93:b2:30:b9:e2:65:71:b8:46:5a:73:30:cd:d8:64:
35:fb:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:52 2025 by rpki-client