Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: kfN/7tqKJeZ99WLn38WdL8/whYNcNCqh9/mY6N+MqxE=
Subject key identifier: A2:71:FA:91:1C:8A:9E:28:5D:CE:0A:77:18:90:69:DA:BB:BE:A6:E1
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 0199FFC8000690072C745EA8DBC46C5FBD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 146F
Signing time: Mon 20 Oct 2025 04:02:01 +0000
Manifest this update: Mon 20 Oct 2025 04:02:01 +0000
Manifest next update: Tue 21 Oct 2025 04:02:01 +0000
Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=)
2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=)
3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: RZM4dyqzotABccvSccYm2Z1YkmL4EE59BA83Moru3DQ=)
4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:00:06:90:07:2c:74:5e:a8:db:c4:6c:5f:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Oct 20 04:02:01 2025 GMT
Not After : Oct 21 04:02:01 2025 GMT
Subject: CN=a271fa911c8a9e285dce0a77189069dabbbea6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:27:f2:44:e6:34:11:ee:9f:bf:bf:7d:be:
46:38:69:6c:65:59:1b:5e:fa:a8:cc:8c:55:7b:5b:
d3:57:62:a0:79:f6:df:b9:53:e4:0c:41:9d:e0:15:
40:37:86:c3:c9:a8:63:29:58:f7:7f:c5:83:40:e7:
c3:b7:1a:e4:b8:c3:2e:0c:9a:93:e3:33:14:c8:b0:
80:4a:00:56:bc:f6:55:ee:08:4f:67:53:b6:6f:37:
64:ed:2b:d7:5a:a9:2f:2a:90:70:aa:10:98:09:b9:
ee:dc:d5:65:e3:ba:68:95:35:79:42:84:b1:7e:19:
b8:f4:09:47:df:9c:3b:b1:1b:bf:22:d6:09:d6:04:
2e:5a:97:fd:df:af:22:03:fd:de:04:cd:ec:b2:df:
23:2a:ac:69:05:5f:07:2d:12:bd:7a:10:7f:c2:74:
88:2c:2b:80:ab:33:28:e7:20:06:81:0d:09:1a:03:
e4:0d:5c:0f:e6:f2:6c:08:b5:1f:8c:1c:5b:1c:c0:
16:dd:30:57:1b:6b:c6:e1:93:66:c3:97:cb:56:0a:
d7:13:c0:55:90:4d:c0:cc:04:61:b6:a8:5c:b2:d5:
b0:de:cd:36:85:37:51:6e:f8:bb:be:5c:5c:98:92:
b1:74:e3:c9:b1:82:9d:3a:92:f7:a9:e0:49:59:68:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:FA:91:1C:8A:9E:28:5D:CE:0A:77:18:90:69:DA:BB:BE:A6:E1
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a1:4a:07:6e:e7:73:14:55:2f:c7:1c:43:4e:d9:7a:25:e0:
73:44:76:36:ed:ab:b4:57:c0:4d:eb:a7:71:ca:cf:47:9f:f6:
a0:7a:2a:a3:02:c9:8b:44:06:64:10:35:85:ad:73:e1:2c:be:
03:09:1c:d9:c7:b7:14:4c:d7:13:96:53:8a:c7:a1:7c:d6:bc:
4c:8b:45:34:d5:97:89:1f:e2:cc:74:80:ff:95:9d:78:c6:1b:
5a:a7:28:97:89:ca:be:74:bf:34:91:95:60:37:10:18:33:51:
c8:f3:bb:57:4c:c9:48:2b:5c:ac:54:95:af:a3:80:ae:fc:9c:
91:9a:13:d0:fd:b2:13:80:6c:1e:e0:17:9a:9b:55:c3:3a:16:
83:2a:b0:1c:a8:a9:b4:54:1b:26:a5:f9:17:52:79:fc:41:bb:
7a:a2:b4:d6:8f:02:68:86:89:84:de:13:13:fc:2b:a9:84:d6:
60:5a:26:6b:ca:f7:4e:25:5e:8c:8c:a4:41:92:8c:0d:69:7e:
22:33:c8:8c:01:5c:ec:37:02:d7:0f:de:ae:2e:64:59:4f:09:
30:fb:2b:f3:db:ad:fc:f7:08:65:7f:68:a4:af:62:0a:d2:86:
41:cd:7b:6f:ba:f5:ab:62:ee:9c:27:b7:f1:18:24:98:46:82:
aa:74:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:10 2025 by rpki-client