Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: pKpQa2EPZZQZlN6nb6ouP074lQ5Z8e8DKL+sobLkshQ=
Subject key identifier: D0:21:F2:0E:BB:61:B2:14:A6:1B:15:4B:E8:82:B7:DB:6A:00:51:A6
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019A006BE90EB4B74F6C36DD39F3718EE5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 02EC
Signing time: Mon 20 Oct 2025 07:01:03 +0000
Manifest this update: Mon 20 Oct 2025 07:01:03 +0000
Manifest next update: Tue 21 Oct 2025 07:01:03 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: enYUijtYKpkBXWiaM8OkQyh7151PL0LfFpfMtvelrJs=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e9:0e:b4:b7:4f:6c:36:dd:39:f3:71:8e:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Oct 20 07:01:03 2025 GMT
Not After : Oct 21 07:01:03 2025 GMT
Subject: CN=d021f20ebb61b214a61b154be882b7db6a0051a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:bc:5f:d9:a5:27:63:c1:24:2f:6d:42:58:
e8:12:20:7b:13:7c:1d:c1:7a:e5:8e:71:7b:9d:9b:
74:7c:fe:d2:44:4f:05:00:48:81:14:c0:28:86:a0:
3d:21:c4:92:86:3a:6d:d8:2c:8a:16:3f:bd:6e:b2:
76:77:c7:8f:51:53:7f:4a:45:8f:c6:c6:79:b6:da:
45:4b:79:43:c3:fc:8d:74:9c:86:6a:e3:d1:79:81:
33:19:20:7d:16:b0:6e:87:87:13:94:70:40:ad:d3:
a4:ff:94:43:43:96:f9:20:1c:ac:4c:a4:9c:66:30:
51:e4:b4:41:3b:38:a0:13:18:df:f9:84:58:da:f1:
a8:2a:ea:7d:92:c3:5f:b1:26:df:fc:3a:b8:a7:55:
f9:be:0b:66:e8:1d:99:21:0d:b8:ab:78:94:06:bd:
96:97:13:31:24:9d:b1:e6:14:3a:63:c5:50:21:73:
f3:f5:4e:05:38:cb:f0:e0:06:48:0d:4a:1b:47:f1:
94:f2:81:ab:02:81:39:ab:c6:96:ce:97:b9:21:9a:
19:97:80:8a:50:eb:20:62:82:03:25:56:55:68:73:
4c:d8:76:5e:23:be:0d:8e:9e:d7:97:07:9a:21:3c:
cc:68:ab:b5:29:6c:05:02:36:aa:dc:b1:4e:73:68:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:F2:0E:BB:61:B2:14:A6:1B:15:4B:E8:82:B7:DB:6A:00:51:A6
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:de:39:29:0a:7e:8b:58:05:16:a6:a4:36:11:8e:a9:d1:2c:
40:d5:45:bf:ad:fb:7c:a2:aa:e6:b4:2f:b5:a5:4d:eb:3f:d7:
c5:c8:f8:9a:49:41:97:cd:b0:7e:28:44:01:11:4b:35:d8:b2:
ed:5b:01:0e:39:74:19:04:fb:2d:41:dc:f2:18:f6:78:28:4e:
0a:2c:4f:3e:a5:99:c1:dc:ab:64:63:76:15:74:91:2c:13:57:
f7:19:17:97:41:77:8f:33:b9:7f:1e:db:13:b0:95:cc:45:d1:
4b:68:64:f4:4a:2d:35:71:b1:1c:5b:ee:14:70:38:c8:91:d3:
2f:00:f7:3b:a8:35:cf:1d:a7:8a:17:0e:68:ca:b2:3f:f5:fc:
44:26:e9:f4:cf:f5:68:68:54:59:ae:50:fb:d1:25:cb:c7:0e:
d6:8b:65:c9:66:8f:e6:85:94:26:93:c0:57:25:ad:f6:d0:18:
12:98:47:ef:80:a0:6d:16:41:27:c5:8e:f0:f2:a8:f4:24:9e:
b3:be:4f:bd:e0:72:73:ad:7e:5d:c2:86:9b:56:f5:33:10:3e:
92:dc:7e:46:f1:14:7f:f2:a8:03:a8:a6:94:bb:fb:08:33:d7:
36:37:b1:31:a8:3a:4f:42:d5:52:c3:50:6c:17:ae:c6:7f:bc:
c5:73:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:39 2025 by rpki-client