Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: jxVEe6y/DaqhnmV+GhAyjzDJci9GvvIGfbKiL/gf+3U=
Subject key identifier: DD:F2:DD:3B:97:31:CD:59:A5:41:19:78:BC:4D:B4:D1:58:9B:84:F6
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0199FBEC1730FAFA5585D97E1FDAB9E46025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 104D
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: Xje2gJHsGSHZxR2pJgSCirQ349U9XiDjTp1OFfa3yF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:17:30:fa:fa:55:85:d9:7e:1f:da:b9:e4:60:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=ddf2dd3b9731cd59a5411978bc4db4d1589b84f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d1:01:50:7c:31:6e:ad:e7:64:8e:63:97:62:
4e:0f:31:56:0d:8e:bf:48:14:2d:df:9f:71:17:09:
19:fc:9c:b0:0c:d7:03:5e:67:f0:f9:3e:1b:c5:5d:
35:7e:e9:ad:50:80:ab:89:ef:af:9e:8b:31:28:79:
38:37:34:01:2f:cc:17:0e:85:ab:7e:fb:b8:0b:fe:
f6:c8:9c:60:4d:0a:00:10:d3:fd:32:26:93:6a:77:
c6:d6:eb:ed:f7:d8:ee:82:61:95:10:4a:a9:29:1c:
13:84:d9:4d:2e:9e:2f:3d:bc:50:e9:a2:b3:10:a5:
16:12:43:bb:d3:17:53:0b:6a:5f:87:9f:59:f4:f4:
ee:b4:09:02:09:be:15:78:ac:02:41:8d:6b:52:1c:
19:50:d0:29:61:47:74:5d:db:bf:91:85:52:2a:9c:
d8:7f:aa:79:81:4e:3f:ca:f7:53:43:f5:a8:b4:14:
89:88:33:d9:d1:3c:42:93:07:8a:c8:24:bf:31:5b:
be:24:ec:9b:4d:55:1d:3c:0b:37:aa:64:90:80:05:
62:a8:86:7a:6b:80:47:fc:d6:7d:45:b4:f3:6a:f1:
96:02:23:6f:14:76:fb:8d:d6:07:d2:77:20:08:6c:
8c:d4:14:ec:fc:39:91:d9:15:d4:fa:b1:58:a9:a1:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:DD:3B:97:31:CD:59:A5:41:19:78:BC:4D:B4:D1:58:9B:84:F6
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1d:c6:d0:f7:fb:7f:d5:52:69:dd:ee:7a:0d:99:69:5c:52:
25:3f:49:08:0a:8c:0e:31:d5:4f:5a:cd:51:e0:50:74:31:03:
e8:93:0c:4b:26:af:55:b3:f4:a6:a5:99:27:b5:a5:04:35:64:
b1:ea:6d:8b:83:64:38:32:90:d4:7c:79:09:3e:15:c2:10:d9:
49:97:2b:35:ba:ad:11:ce:cc:2c:69:f7:2f:63:40:94:ed:6c:
bd:0b:55:09:f1:c6:c3:e1:a6:f8:6c:4d:f0:ce:ff:7b:b4:6e:
23:21:a3:80:ae:7d:79:3a:30:e0:c1:3a:b5:56:3b:4a:cf:8b:
12:c8:46:e9:f0:b9:aa:86:b5:5d:1e:8d:b8:c2:75:2a:56:fc:
f9:b7:7d:fb:4d:55:04:ec:3a:56:4d:f1:06:2e:5e:84:69:1c:
97:d1:11:7a:af:86:dd:4f:75:a7:5f:39:3f:6d:e0:1e:c4:63:
cb:ef:ca:7a:5e:72:44:2f:a0:7b:dc:ab:6c:51:84:b9:7b:0e:
59:ae:85:f1:c5:e6:1c:ca:eb:57:4e:40:c7:62:3a:e8:a8:90:
86:fb:82:3f:27:d5:c1:4d:d8:2b:74:94:ea:f9:99:ab:c7:fc:
8b:4c:bc:50:5d:fb:35:f7:31:ce:9d:28:80:ca:98:c6:ab:17:
da:e7:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:24 2025 by rpki-client