Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: UxqSoiyUJnTmqdYKhTahvG0MKYdW+dEXazzEtvDNA9E=
Subject key identifier: 68:85:F2:C8:A6:00:7A:11:B1:C3:C6:2B:C9:A3:7A:03:D3:B1:51:FD
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0199FBEC0B2DA96AB3C1D571C2261911B798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0CA7
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: ewY0gGFijY4mIAc7TGugIHlVLFgV1SpY+jKflYTcymg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0b:2d:a9:6a:b3:c1:d5:71:c2:26:19:11:b7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=6885f2c8a6007a11b1c3c62bc9a37a03d3b151fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:61:ce:b6:43:b6:ba:6e:11:a5:8d:92:d0:
63:32:60:d7:1a:98:9d:87:97:18:48:f3:d5:2b:99:
70:25:a6:f8:f2:42:ce:fc:39:23:c6:9a:84:89:69:
38:b0:fe:53:1e:6a:c5:b7:26:4b:ca:15:db:98:40:
4a:1a:fb:11:90:af:02:0e:cc:a9:c5:a0:8f:36:e6:
d4:c3:5c:6c:88:07:3d:33:29:04:72:58:29:13:57:
87:85:73:33:33:e1:1d:27:00:18:f9:c5:96:ae:48:
54:e3:e2:6d:4b:a2:eb:5d:e9:ef:83:25:4b:23:7a:
5c:c2:d4:67:f9:46:14:95:63:26:78:2d:44:42:2c:
b7:7e:86:d1:03:e4:9d:a1:8c:51:de:4b:2f:3b:fe:
5c:42:a0:9c:99:8c:b5:30:ba:fd:f1:54:07:8f:fd:
ab:2f:4a:18:00:e1:09:1e:37:71:47:f9:d9:84:1e:
5c:72:9d:08:11:6d:10:6d:09:69:d6:8d:b9:c2:15:
2c:74:da:e9:50:72:68:ee:d3:f4:90:db:45:8e:80:
f8:c9:06:fd:d6:a8:8d:63:39:ca:dc:9b:21:38:21:
c9:60:98:fd:b8:9d:63:e6:9d:56:fa:92:a7:4f:6b:
b6:e1:e6:5e:0f:d2:a7:f7:7d:d8:6e:c5:56:9d:25:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:F2:C8:A6:00:7A:11:B1:C3:C6:2B:C9:A3:7A:03:D3:B1:51:FD
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bd:04:7b:f1:a9:f0:3b:e2:fe:31:e1:06:63:07:71:a5:f5:
d6:dd:2a:84:b1:a9:c7:68:99:ed:33:90:04:b6:e4:de:b1:e9:
4a:e5:a4:73:f2:f7:ab:48:30:fc:ed:9b:96:14:54:33:d2:49:
1e:81:4f:67:f7:15:d8:35:48:0c:14:1c:c5:c1:07:81:67:6f:
d7:5d:83:c4:f1:44:76:ca:44:5f:63:78:49:7e:0d:10:ef:2a:
e6:b6:a8:b5:16:49:bd:06:2d:2f:29:1a:49:8f:93:22:60:f7:
45:b0:a9:27:6d:51:68:4b:00:df:8c:ea:d4:be:02:1d:0a:9e:
70:37:b6:47:68:9a:64:e9:24:93:7c:3f:48:ba:ca:03:c7:b4:
07:9b:46:b4:0b:da:cb:ea:ad:55:db:93:e5:b4:f6:31:48:d7:
76:4e:3b:9a:e5:27:59:d8:db:f5:c2:b3:bc:b9:c4:d0:52:82:
34:81:b6:ca:a6:19:72:8b:85:a5:9d:78:e4:b4:d2:c2:57:bd:
fc:83:71:41:76:b3:15:81:25:e5:53:00:e4:05:85:33:99:e9:
7b:fa:64:73:6e:9d:e1:3b:78:c2:a2:6a:00:46:ce:7b:0a:71:
42:be:e7:58:3b:89:6e:90:05:6c:92:19:10:64:25:21:7f:69:
19:ed:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:00 2025 by rpki-client