Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: rCFaq1/VY/9sEXFDQuJ3kZcKEMPBLzZqrQ/3cZpEH2k=
Subject key identifier: 80:A9:5F:69:B4:40:9F:5B:87:84:8C:53:26:3C:1E:82:0B:33:62:EC
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 0199FD3424680A536079B7BFF2D6957EF3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 11A9
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: OH9gNHUxhBiZmyYiSeGdU1hHXoH7fglMQOFMi9P1L64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:24:68:0a:53:60:79:b7:bf:f2:d6:95:7e:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=80a95f69b4409f5b87848c53263c1e820b3362ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:4a:1d:35:74:fb:3b:7e:e9:60:96:0f:06:
72:b7:c0:33:10:07:83:44:18:c0:2b:f3:af:65:d9:
46:c7:c1:f5:3d:65:9e:9a:a3:14:d5:de:55:cb:9d:
5c:f2:82:d7:bf:81:49:31:25:70:1a:cc:b2:68:20:
5f:43:d4:0e:90:b4:8b:7f:5b:4f:b8:98:bf:d0:d9:
1b:a7:cf:ff:c0:71:d0:c5:fb:6b:6c:9b:50:5e:2d:
3d:94:25:73:bb:10:44:28:e4:7d:b4:68:2c:84:68:
93:ff:7b:39:90:ad:91:34:b5:14:9d:5a:32:b3:16:
ab:bd:15:dd:34:01:da:d7:17:20:62:84:eb:02:36:
80:8e:cd:97:02:4c:6d:8e:5d:b2:cc:9b:31:9c:74:
4d:a7:68:b6:19:4a:42:7e:84:ee:30:81:cd:b0:d7:
1a:07:68:d4:82:fb:cf:d7:81:56:5e:6b:0e:90:f0:
cb:2f:4d:b0:09:31:c3:74:2d:32:09:b6:b0:ec:52:
d5:bd:5b:95:67:e1:ec:6d:30:d8:68:9b:d1:4c:2f:
77:c6:a3:88:14:ee:91:78:fe:e9:21:fe:5b:58:92:
f9:a1:89:b3:50:72:1f:57:0b:65:75:db:f9:d7:b4:
9a:7b:37:2f:6e:80:6e:d6:c7:09:8f:3e:f6:78:cc:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:5F:69:B4:40:9F:5B:87:84:8C:53:26:3C:1E:82:0B:33:62:EC
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a7:40:4a:3d:00:7a:0f:8c:37:a4:9f:b9:87:05:62:31:8c:
89:18:9f:6a:92:1e:ea:a4:21:b5:cd:cb:fc:7a:4d:2d:08:ce:
0b:e3:c1:b3:c1:c2:85:2e:51:ff:44:21:16:82:1d:ed:26:91:
e9:32:10:8d:29:44:de:05:d2:e7:0f:0e:a2:9f:eb:85:b7:47:
06:8a:36:8d:c4:77:c5:67:83:be:e8:58:23:b5:f7:b9:d5:f1:
74:ac:c5:85:62:95:1a:d7:28:39:fa:30:b0:a9:55:4c:06:4e:
85:9d:a3:1a:e6:8f:03:3a:bf:ea:5d:50:c4:26:80:9e:37:17:
b3:4b:19:4b:8e:29:f9:7a:4a:32:21:24:b3:e8:9f:04:ce:fd:
f8:ba:6d:d8:24:10:30:e3:90:c7:ca:06:b5:a0:72:68:ca:4a:
19:e4:40:33:0c:32:d5:02:08:85:4e:35:1c:53:8c:01:8c:77:
3d:22:52:f1:43:8a:88:a6:10:86:6e:9b:09:00:fb:9f:7a:7d:
c9:6b:3c:88:3f:b2:00:41:38:a2:ad:db:78:b3:e6:c4:f6:ff:
00:3a:d0:2e:4b:75:9a:92:77:44:24:b4:12:e7:20:ab:be:57:
c8:ca:bb:4a:43:4b:f9:74:44:5c:86:e3:14:57:b2:b3:40:e4:
ae:b5:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:12 2025 by rpki-client