Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: g6+i25psf9bNAGU7tNI7t4gOaJ/Euy012xf/HvKNF2A=
Subject key identifier: CC:8E:78:1A:8B:D2:76:A9:5A:97:AA:EF:3B:43:F8:9E:FD:58:5E:E2
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019A0034F79A1D9FDC4FCB690754E1F82ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 16F4
Signing time: Mon 20 Oct 2025 06:01:02 +0000
Manifest this update: Mon 20 Oct 2025 06:01:02 +0000
Manifest next update: Tue 21 Oct 2025 06:01:02 +0000
Files and hashes: 1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=)
6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: hL/NPTK8TYRO7YA+yZLmKSFQnwl3op/MSjFcKR01hP0=)
7: ftA_0MHprxcS8SlFhkjswrNXwFY.roa (hash: smdGNCpTIhX1wgE3ptT3KMsrSmr38EbIS8Vn8KXDg24=)
8: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
9: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:f7:9a:1d:9f:dc:4f:cb:69:07:54:e1:f8:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Oct 20 06:01:02 2025 GMT
Not After : Oct 21 06:01:02 2025 GMT
Subject: CN=cc8e781a8bd276a95a97aaef3b43f89efd585ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:37:c2:2c:f5:eb:f1:96:1f:dc:46:fe:5c:
83:dc:0f:32:6c:57:a4:2a:a0:1b:1c:49:c7:82:0b:
68:6d:36:0c:29:ec:65:c1:31:ae:86:a8:ba:33:84:
e5:95:ee:9d:73:87:3e:c0:f5:8a:9c:d3:e9:ad:4e:
4a:05:4f:9e:7d:86:d8:0b:8c:db:63:8b:65:03:37:
1d:3e:60:2e:32:bc:46:da:f0:08:32:90:0c:29:4f:
f7:95:82:68:ab:5a:a4:70:4a:5e:50:a7:f9:76:73:
92:ed:99:ff:21:07:79:d7:20:bf:5e:8d:7e:bf:d0:
04:6a:27:3a:ba:30:95:c1:b8:75:50:bf:47:63:0e:
54:d3:53:be:a3:05:80:d1:a5:4b:5b:43:11:1a:ff:
de:46:76:60:be:c8:47:e3:62:dc:5d:d2:ff:17:5d:
b2:bd:92:30:43:75:2f:50:17:c6:8d:7b:12:00:b1:
5a:dc:a1:10:60:eb:52:b6:8d:24:79:bc:d5:ce:96:
85:be:61:b1:ce:55:40:c0:af:21:ed:2d:51:76:5d:
a7:2d:2b:92:51:89:8f:45:09:74:72:1d:78:b8:f4:
80:2c:ec:62:c7:79:49:fd:68:5b:68:17:6d:c3:5c:
60:55:8b:6f:59:09:d9:94:b6:a1:c3:af:7e:eb:09:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:78:1A:8B:D2:76:A9:5A:97:AA:EF:3B:43:F8:9E:FD:58:5E:E2
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:60:0d:39:8b:93:f4:4f:ab:ce:3c:34:7e:c4:33:80:14:
e6:f0:8f:f0:46:99:3f:38:c1:c8:d1:68:29:9d:5c:1c:8a:c6:
df:42:56:11:fb:f3:46:e5:4f:9d:0f:2e:3d:7a:db:c6:3c:70:
a3:c0:94:6c:c7:ca:bf:25:95:85:81:8e:21:bf:5e:f3:7a:49:
52:bb:1f:59:58:13:4d:09:38:38:fd:ee:ac:3f:46:b7:07:7e:
3c:d1:09:59:fb:50:18:5c:91:eb:b4:e1:25:20:b7:57:e5:57:
07:2e:11:f8:b9:3f:90:9d:71:ac:ed:76:d6:33:a5:09:d6:1b:
e8:d4:4a:a6:c3:c0:9c:2a:ea:7a:4e:4e:90:68:92:15:af:2f:
d3:81:3d:50:3c:a4:9f:6d:94:7d:18:61:21:3b:1a:43:da:94:
0e:62:e8:81:1d:14:89:11:73:de:e6:a8:9c:1b:74:dd:92:fb:
8f:57:6f:ac:3c:ce:49:ac:50:d5:a0:4c:ae:4d:3e:64:e9:55:
65:76:32:cf:11:b6:b5:f8:e7:58:2e:ea:7c:27:18:28:b8:c3:
ba:71:81:3c:ff:42:0c:de:c4:94:07:f7:e7:56:d5:fa:e2:b1:
c0:ec:4c:1e:db:38:a4:15:fc:5c:57:7a:18:8c:4b:ab:a0:f7:
f2:d4:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:32 2025 by rpki-client