Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier: 5i8NXODs925vemw28gZEWAis/88mVWORTN+AfHAEYVc=
Subject key identifier: FB:48:45:4A:48:B5:F1:65:D5:07:C9:1A:56:25:9D:E7:75:6F:76:FA
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial: 0199FC586A5E026A21FC7262068388CEECCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number: 021D
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: TfLraqzK2VZ1acw2G1WJJ3gfjpyzLXQRkwKqndadPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:5e:02:6a:21:fc:72:62:06:83:88:ce:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=fb48454a48b5f165d507c91a56259de7756f76fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:f5:7c:cd:ac:5f:0e:6c:9b:8e:fb:e1:8e:
0a:45:a6:d5:2c:31:eb:6f:d4:9f:f3:46:bd:cf:b3:
a1:af:e2:cd:18:a1:5a:4f:f4:84:0b:97:7d:9b:ad:
1a:a0:6e:9d:bc:3d:38:bf:77:fc:ed:5f:2c:87:77:
5a:88:67:b8:57:a6:2c:62:70:14:83:fc:e2:af:fd:
3c:15:8f:07:1f:1e:74:d2:8f:db:85:0f:58:e7:2e:
33:d6:f2:79:52:03:67:ce:ef:33:de:a6:0c:81:ea:
63:66:66:7c:22:f2:cc:9e:3a:a7:63:6b:3e:93:32:
2c:64:e4:2c:ff:3c:38:12:06:c6:3b:2c:bc:de:bb:
cf:80:13:8b:c3:a0:34:ea:64:56:9a:e4:5d:8b:5f:
71:62:e2:b7:93:18:25:87:5d:0b:94:e4:b5:da:e4:
2d:d0:e8:49:ac:9f:3d:a8:35:77:7b:56:d4:e9:19:
8e:07:92:4f:b3:2c:83:53:41:fb:11:19:ee:e6:be:
1e:53:cb:7a:e2:44:12:95:34:69:17:2b:c7:6d:d6:
e4:3e:2f:91:fc:72:11:20:a7:f7:17:3a:a6:07:ca:
c1:e5:cf:3f:91:c4:47:97:b7:f2:a5:20:fd:ba:65:
15:aa:f7:00:c8:bf:9d:5c:d1:5e:af:50:cb:ab:05:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:45:4A:48:B5:F1:65:D5:07:C9:1A:56:25:9D:E7:75:6F:76:FA
X509v3 Authority Key Identifier:
keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:9a:f5:1d:5a:37:e2:ed:6a:13:08:76:14:c2:08:c1:06:
cc:1c:62:9a:18:b2:10:01:25:d8:2d:21:10:0e:5f:cb:1b:48:
8c:c8:d7:97:e2:33:3a:f5:0c:32:db:05:a8:30:18:82:cf:02:
8a:40:08:bb:d7:98:93:46:ca:a5:3e:33:d4:f2:a7:9c:c2:c5:
c5:7e:c3:75:89:51:91:91:5d:25:61:d5:24:b4:0c:9f:a1:98:
ef:e5:9a:8c:67:91:a9:da:97:1c:95:3f:8e:41:57:e1:00:cc:
14:86:22:e8:62:73:5d:42:7e:62:af:e5:b3:58:b8:00:cf:cd:
40:95:9d:24:05:38:70:22:a9:0b:98:63:b8:82:05:b4:c4:c6:
03:e2:31:d3:c0:2f:83:1e:b0:cb:7c:cc:75:ec:05:47:10:73:
47:01:04:46:9c:dd:d1:55:9e:09:c9:cb:1b:bf:de:03:f3:6b:
38:dd:a7:85:60:ca:f4:ea:af:43:1c:50:4f:c9:50:e1:f4:f9:
b3:70:54:4d:c6:7a:a3:0b:fc:9e:c9:57:bd:0b:bf:4e:bb:34:
f1:64:c5:ce:ae:5c:01:e3:6c:2e:52:8e:fb:9f:c0:c8:7d:06:
e9:fb:fc:20:c4:1d:5d:ba:4c:77:ef:e6:e3:76:2f:a2:9f:a8:
13:91:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:34 2025 by rpki-client