Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File: F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier: cfMHEsBMyxhFdQ8/2CHEewLMsz/WdmaBDjgLaWkYbAM=
Subject key identifier: EF:4C:1E:29:0B:F8:A6:D7:AF:F3:C8:5A:AD:14:36:57:5F:F1:FD:8A
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 0199FF902FEE487C208CD598736014FDE97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number: 16EF
Signing time: Mon 20 Oct 2025 03:01:03 +0000
Manifest this update: Mon 20 Oct 2025 03:01:03 +0000
Manifest next update: Tue 21 Oct 2025 03:01:03 +0000
Files and hashes: 1: BGKLdnBBDejou33OrAMguB4fA_4.roa (hash: nQjabd0iTAbPBudq8662bhERneJSKjsRW9LjqK/8NoE=)
2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: T2rzwqGXl8Zu9EosqQinDaOrDIC9lMESk6APfbUX+18=)
3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:2f:ee:48:7c:20:8c:d5:98:73:60:14:fd:e9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Oct 20 03:01:03 2025 GMT
Not After : Oct 21 03:01:03 2025 GMT
Subject: CN=ef4c1e290bf8a6d7aff3c85aad1436575ff1fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:8f:ed:9e:84:34:c0:0d:a1:14:72:6b:bc:
0e:48:15:c1:a2:ae:51:62:b3:35:7f:84:e8:75:7d:
87:b4:4f:51:95:42:13:08:8d:41:f7:d3:4f:02:b6:
2e:18:3b:47:3d:b8:16:81:57:c7:83:3d:09:39:79:
1b:1f:9c:d4:6a:c2:ef:8f:4c:a4:4e:ce:81:46:52:
fa:71:2e:6a:68:e0:74:a7:55:78:78:37:ab:25:35:
e0:9a:a2:5c:0d:d8:6c:48:eb:54:9a:74:9f:c6:8b:
64:31:7b:cd:b2:62:5d:6f:b0:9a:89:da:13:da:9b:
6d:f4:ad:8d:fc:6e:d6:da:1e:0a:82:c2:f5:70:16:
f1:ca:a4:c6:78:d2:3a:d1:cd:67:0f:79:c7:35:01:
4c:01:15:66:12:97:09:e4:5b:ec:63:3f:62:42:01:
69:a6:73:62:07:3d:24:3e:21:be:cd:e1:ce:73:d5:
f5:ed:e8:b2:87:ed:ea:7d:00:03:fb:13:ab:d0:5e:
40:ee:e4:91:c6:22:ae:a5:26:00:c3:01:9c:d5:5d:
0c:aa:ff:32:29:5c:8d:60:52:17:90:e5:9c:64:35:
4b:59:50:ce:4a:74:87:02:26:07:28:ff:58:fd:31:
c8:86:04:e4:b8:24:40:e1:a9:92:ea:d1:d7:86:0a:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:1E:29:0B:F8:A6:D7:AF:F3:C8:5A:AD:14:36:57:5F:F1:FD:8A
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:bf:64:5b:b0:92:f0:fa:d7:65:99:80:a9:94:28:c3:43:
47:57:e3:e6:58:f2:23:39:21:14:bb:c7:29:14:29:99:05:a4:
a4:2c:b7:97:3e:32:1b:d0:ff:71:17:2e:df:86:5c:1b:4e:34:
1f:b6:42:86:33:f4:68:09:9c:2e:d9:2c:44:6c:67:b1:73:6b:
b5:7b:69:4d:34:24:ca:68:9a:32:f2:30:98:1c:55:b4:8e:55:
67:19:73:77:33:24:e6:f9:fe:a0:5d:40:56:a0:4b:76:a0:77:
91:c3:cd:a5:0a:f6:5f:98:b1:2f:ee:e8:21:09:9a:8d:34:73:
e6:a7:03:a3:e5:b8:f7:e3:22:c4:3d:42:d4:2e:1d:6c:ea:ec:
e8:39:28:15:9c:5c:f6:fc:93:79:bb:f2:b4:15:1e:74:83:e4:
2f:da:1b:f1:fe:42:64:71:15:84:84:69:77:61:1e:22:82:49:
0b:8c:54:b2:53:b1:89:d2:85:7f:50:ab:6d:df:26:a9:17:8c:
65:76:00:02:b0:29:48:0c:e8:92:a2:53:b5:be:25:5b:b1:b2:
a0:2d:b0:51:83:80:95:ca:5b:59:c2:64:06:b2:8f:c6:95:f1:
d8:28:1b:d1:b6:15:65:f3:6e:bf:10:cc:14:87:b5:d3:74:02:
9d:67:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:18 2025 by rpki-client