Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
File: F-ad3CmgWyxF7jzFojQLLkxtrV0.mft (raw, json)
Hash identifier: ZjB2hC+OBPTKCQ3uB1O9Qd126yf6Bu7FhvSrI4JCzh0=
Subject key identifier: E8:2B:57:92:55:DC:C6:5C:42:6B:88:13:B9:81:25:4C:95:6D:7C:44
Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Certificate serial: 0199FC217B2CDF493AC84ED54A1778467135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
Manifest number: 099A
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: A8Ej05bPXSyJSutko6zMXi_LdTs.roa (hash: l1Np2vyuCibE5G3ZNC4CZuxMVOv5Q0qw24MUV/m5PcU=)
2: F-ad3CmgWyxF7jzFojQLLkxtrV0.crl (hash: 1uFQQ0HfadWqmNDIh7VmqpfBEyd6y4n4UeExBrmjzGU=)
3: LrktV_MNLgMuzH072PMIh7VuEn4.roa (hash: shYF8grlz0KlYGSJ/aVE66ppgDECTuvjQ5MpA1IvAJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7b:2c:df:49:3a:c8:4e:d5:4a:17:78:46:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=e82b579255dcc65c426b8813b981254c956d7c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:5b:42:3c:47:8d:af:3a:e6:1d:39:a4:8a:
42:de:34:7b:eb:85:b2:71:5b:45:8b:14:e3:54:88:
d0:2e:1a:8c:e3:39:26:f4:0d:51:09:e3:92:6e:27:
b8:66:57:21:d8:77:77:20:ea:c3:23:15:5d:8d:b3:
08:a0:3e:83:2a:2e:8d:63:49:e7:1a:35:2a:e0:e2:
4f:a0:74:c5:d3:b6:59:e6:ff:2a:1e:bd:9f:5a:65:
d7:ca:42:85:2f:76:3e:5e:96:b9:3c:93:18:84:7b:
17:8d:48:ca:d0:7c:ba:82:c8:b7:f8:04:13:66:55:
c1:a0:49:87:03:7c:b6:03:ea:ff:06:5b:7e:5e:79:
63:70:9e:19:24:49:23:4c:57:8f:60:0f:e7:e2:82:
94:db:df:a7:ee:a8:2c:a8:27:a6:49:0d:b6:3c:2a:
d3:06:ea:b9:a7:ff:99:4f:53:70:b9:ff:06:23:55:
15:27:8a:27:9a:25:5a:a4:02:11:88:2c:3a:ca:b9:
2e:3c:0b:18:a9:25:b5:a4:e4:d6:5b:63:cf:bd:12:
a4:ea:01:bc:81:08:cd:76:0b:67:07:0f:0d:bb:15:
ba:d9:74:a4:73:86:0e:98:46:13:c3:0a:91:08:ae:
a7:84:24:b7:68:59:51:23:aa:0e:78:07:8b:cc:f3:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:57:92:55:DC:C6:5C:42:6B:88:13:B9:81:25:4C:95:6D:7C:44
X509v3 Authority Key Identifier:
keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:41:45:9e:be:9f:f4:0e:d0:4b:57:bd:93:9f:da:c9:6a:
f2:ba:5b:6d:09:7e:a8:82:21:4c:24:26:ba:d6:77:9e:ba:3e:
c0:08:a8:ce:55:1c:05:48:a3:bb:f0:1e:4e:39:78:7c:a6:a8:
13:00:38:95:36:ef:10:c2:a9:e4:99:55:8c:3b:3c:c4:d5:33:
09:7e:01:3b:66:ac:7f:2e:9b:ab:1a:cf:8d:b0:ac:96:4c:61:
10:25:7a:82:bc:b8:22:5c:9a:90:2c:6a:1d:87:cd:08:14:cc:
9f:74:30:16:7a:6c:70:72:24:b1:94:86:28:94:65:eb:2d:20:
90:d9:97:e6:48:0e:46:ec:18:4d:57:15:19:8f:ed:c1:38:fa:
7d:b8:e0:d4:e9:2c:c0:d4:c6:7d:07:80:93:2f:d1:c9:dc:5f:
25:c4:16:70:cf:7c:1d:85:a0:b2:a3:55:88:b1:97:76:70:cc:
c6:e8:df:05:8c:95:29:45:56:e3:14:ea:b1:a0:4e:0b:a7:29:
b8:3a:bb:69:a2:64:24:7f:f1:75:13:e1:97:d5:d4:94:65:c6:
78:e1:73:7e:87:d6:e4:fa:47:2e:33:68:a0:ba:4b:2e:1e:10:
fb:ef:65:c6:38:23:8c:8e:2a:74:b7:ff:c2:f2:fe:30:79:f7:
54:62:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:30 2025 by rpki-client