Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: lQD3UviGklGQjRgtHA+tKTxbp9ML918HFvuPjhVnT54=
Subject key identifier: 78:A9:5B:CB:D3:89:E9:F8:88:D0:50:B7:8E:F4:2B:A8:C5:4B:75:E9
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0199FBEA9CEBD17963A7CC56382DD3D5B9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 10E5
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: Y9+nw+4LGDMk9DpTs1l7uItXk9HHMOc7b8NEvscEtqw=)
3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9c:eb:d1:79:63:a7:cc:56:38:2d:d3:d5:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=78a95bcbd389e9f888d050b78ef42ba8c54b75e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:4d:44:44:1c:5f:58:14:61:36:7c:31:22:
1e:bb:3b:0c:bb:50:75:d8:3c:49:b6:88:52:ea:c2:
67:2f:63:d3:fe:ca:15:0d:72:81:54:01:ef:6f:0f:
4e:d3:fb:b3:f2:85:0a:ca:68:a1:51:00:bc:93:56:
ce:cf:07:93:ad:f0:05:c2:83:06:f3:b0:a5:6d:3d:
ee:dc:bf:ec:61:c5:ea:dd:36:f9:7f:b4:d2:3b:3c:
b0:2e:a7:00:45:96:07:c4:47:ac:72:40:34:83:6d:
11:97:f7:bf:bb:69:2e:9c:0a:58:85:85:46:cb:86:
9e:5c:0d:5e:b4:fc:ca:c4:41:87:8b:47:f5:8f:2b:
f7:45:c2:78:d9:ea:28:f0:62:72:16:a2:1c:6f:75:
d4:59:6e:b6:56:cb:10:38:66:f1:72:e7:35:84:f1:
1c:c1:06:f0:7c:4b:87:2c:22:29:ab:17:b4:e2:3a:
4e:8d:fe:1a:36:b7:38:b1:b9:91:c6:14:7e:d0:b1:
b2:ac:66:05:77:d6:62:6e:bb:7c:d0:ed:92:75:2f:
9b:f2:6d:ea:dc:26:b7:f3:30:a2:94:55:63:fe:d1:
26:77:5a:0c:11:ef:1c:e3:4a:ee:c4:31:f2:ea:ae:
0e:9d:3f:43:4f:38:d3:66:42:8a:46:2b:27:88:ca:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:5B:CB:D3:89:E9:F8:88:D0:50:B7:8E:F4:2B:A8:C5:4B:75:E9
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:b3:fa:9d:55:73:8f:44:98:e8:d2:67:90:c7:bd:7b:e2:
49:e2:85:63:9c:3d:d0:56:22:4b:c3:f5:38:92:3b:2c:e7:29:
de:39:b8:3b:3d:64:1a:73:6c:26:44:38:6e:fa:dc:e0:8c:a6:
57:a3:4a:a1:0b:3a:d7:fa:51:4e:3c:6d:fe:11:32:ab:17:b4:
2d:e7:73:50:51:1f:0c:10:55:1c:5e:51:ff:8e:77:e6:ef:f6:
e9:bd:9a:85:0f:9e:92:8a:4c:7d:f9:28:3a:71:ae:10:ab:d9:
60:a7:76:6e:08:85:6d:90:e6:11:83:b9:89:5c:57:b4:47:cc:
9e:50:f1:67:b2:86:10:00:ae:a5:80:a7:a8:0b:ac:aa:53:c6:
65:2f:99:e7:2f:b3:ad:65:cb:27:0b:58:7d:23:a2:87:a3:74:
a5:4d:6f:f9:1d:6f:02:94:0f:f8:5e:9c:21:88:83:ad:9a:4f:
39:6f:93:4f:e8:70:91:ff:db:b4:5f:31:fb:11:a1:c6:3e:27:
be:2f:8f:35:09:b4:d3:60:fb:1f:78:f0:b7:30:36:2b:ed:ef:
7f:23:d0:70:b0:d3:2b:a3:37:12:b0:3b:a5:76:e3:fc:ad:04:
8e:61:78:02:d8:97:bb:85:db:8d:72:64:4c:2d:ba:50:77:05:
52:72:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:26 2025 by rpki-client