Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: sJLBvGDthV/iicsGnrelx+1LiKoXO5SBdoia3LkozW8=
Subject key identifier: 90:8C:FA:26:78:8E:E8:5D:96:50:F9:FB:92:63:61:AD:8A:5A:DA:A1
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 0199FCC6811BB0371653AC4CFD14B848DC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0C00
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: DmwsverjlLdui6H9eJshS0EfNlbbo5TeWQmHqhvIWxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:81:1b:b0:37:16:53:ac:4c:fd:14:b8:48:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=908cfa26788ee85d9650f9fb926361ad8a5adaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:97:0f:e4:c9:d1:86:91:14:c6:66:dd:5f:
e1:e3:3e:e5:fa:2a:48:a0:ff:47:3d:f2:4f:17:2e:
9e:1d:d1:fb:66:8e:23:f8:a0:74:f5:c9:b9:9c:5c:
67:06:85:09:5c:8a:b2:33:1e:63:7a:58:31:5b:c8:
63:9f:4c:b7:a5:7a:62:ce:61:27:62:3b:fa:f5:37:
14:f2:14:82:6b:e3:95:70:10:40:94:3d:e7:48:6e:
7e:36:d7:f1:6f:26:9b:b9:41:a9:95:ea:89:8d:a9:
a7:c5:07:0e:8c:32:b0:f0:37:67:ff:7c:a1:18:6b:
c5:ce:14:80:eb:b6:f7:8f:84:ee:a7:6e:b4:a2:f3:
d1:8d:d8:1e:8f:97:2e:3f:3b:e9:0e:b3:1a:15:36:
8f:a8:16:bb:ee:f5:68:63:46:74:4f:bd:87:92:21:
3b:45:cc:41:0d:21:ad:c9:86:8e:96:43:a7:3c:e6:
41:60:f8:06:25:b0:65:4d:a6:79:c5:2a:13:58:07:
9c:ea:e3:a0:ba:f1:51:6e:d1:b4:d6:42:59:42:2b:
a9:f2:8a:ac:03:64:71:74:92:2f:3f:7f:39:45:bf:
95:fc:95:8c:39:b7:6d:d6:35:40:33:d1:31:b8:97:
ac:da:5b:7f:11:5d:ae:e8:7c:a6:a8:92:0d:7c:62:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:FA:26:78:8E:E8:5D:96:50:F9:FB:92:63:61:AD:8A:5A:DA:A1
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:72:a9:1a:38:38:2f:92:b1:60:c4:9f:c0:b7:72:ae:d9:
8d:3f:4c:41:b5:8d:d1:51:2e:fe:d7:c1:30:b6:eb:2c:66:b1:
22:e0:3c:e2:1b:93:44:7f:dd:9f:d2:10:fe:01:8b:ce:08:21:
89:60:25:79:be:d6:9e:37:0a:85:cc:ca:f1:11:74:61:84:13:
fc:3a:67:22:90:c2:c4:93:3a:5a:ed:3d:3c:65:ca:9c:e1:ff:
09:8f:6f:6c:a1:22:39:0d:4b:e4:d3:5c:c7:6a:78:26:f5:e4:
8e:6d:5b:6f:99:67:5f:48:3d:b1:a6:8f:57:c0:a2:a5:ba:6a:
f0:e1:d9:91:02:89:2f:ec:20:75:d6:90:50:e2:90:b9:19:af:
dc:13:3f:87:39:b0:ab:34:24:b7:05:dc:85:a2:67:63:77:94:
a4:82:fc:ad:87:98:0b:fa:63:6f:66:80:f1:cd:25:33:08:74:
ed:70:81:a9:3f:3f:cd:8c:ee:b4:05:31:bb:17:a6:9f:ed:df:
83:ba:a5:90:65:9f:45:22:83:36:d3:75:dc:16:f3:6d:60:9e:
c9:a9:8e:09:7b:49:f8:ac:6e:5d:e0:6a:48:e0:0c:7d:48:71:
83:61:d6:71:2b:c1:c2:5b:b5:a9:4c:18:1e:c6:b1:ea:1b:87:
ee:1c:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:19 2025 by rpki-client