Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: /jnp7MA1vBUrCBsXDJJdAl1PMpMC7AyR0Ao7TaoGuGA=
Subject key identifier: 51:8A:87:01:B8:6C:A0:0B:92:8A:8F:51:94:2E:6A:98:3C:2C:2A:5A
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019A02FE80E2D290D78933F9AFA22E634B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0C94
Signing time: Mon 20 Oct 2025 19:00:24 +0000
Manifest this update: Mon 20 Oct 2025 19:00:24 +0000
Manifest next update: Tue 21 Oct 2025 19:00:24 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: CNDUUBygVNuOZ0HYlswrLlr4EJIqOXjke4yoUifooEI=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:80:e2:d2:90:d7:89:33:f9:af:a2:2e:63:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Oct 20 19:00:24 2025 GMT
Not After : Oct 21 19:00:24 2025 GMT
Subject: CN=518a8701b86ca00b928a8f51942e6a983c2c2a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:21:a3:23:35:8b:74:3f:c3:92:b6:e4:b4:
a0:54:ae:f3:39:95:e7:d0:1e:1e:6c:d5:9c:c0:ce:
14:04:5d:1c:3c:1f:32:39:86:12:e5:b0:76:6c:84:
1c:6c:de:02:ff:cf:98:5f:c3:f2:9f:48:0f:c6:98:
4f:5d:d2:4b:3a:bc:1c:18:a9:9e:ac:19:82:bc:35:
e9:0c:f6:38:09:f8:f9:79:83:d6:86:34:2d:b2:cf:
2b:d7:98:09:32:ce:b4:c4:e4:84:c2:95:f9:e5:c2:
56:1b:d0:4a:74:a8:9f:38:91:27:ff:e0:b1:e2:17:
be:df:24:40:c5:ae:9b:92:a9:f8:34:28:00:d1:55:
c2:5e:97:e1:e5:a4:26:fb:17:32:aa:41:db:f2:b9:
ec:8c:43:e6:01:66:16:f7:a8:78:b1:75:9d:19:d2:
b8:0a:08:95:8f:cf:e9:78:a8:40:23:94:f7:da:1f:
ec:bc:0d:f6:c5:a3:32:2b:ba:0c:8e:db:9d:0f:6e:
9b:c1:06:b6:c1:be:34:3a:26:cf:55:c4:b7:36:ab:
98:24:e5:74:f8:26:df:bc:38:b4:71:a5:d9:90:c9:
ff:66:75:c4:96:68:a4:7d:d4:72:aa:1b:d4:5c:88:
34:c9:1b:68:8e:23:a9:13:55:0c:fb:54:a6:16:c7:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:87:01:B8:6C:A0:0B:92:8A:8F:51:94:2E:6A:98:3C:2C:2A:5A
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f8:20:f4:a0:d8:97:5e:a3:b4:d6:6c:25:7b:26:ee:82:bd:
fe:b1:cd:8e:39:63:19:ee:97:80:b2:c9:88:05:9b:a3:53:4e:
4a:f6:6d:01:ba:80:9b:61:62:0e:d7:27:ec:e9:b3:cd:b6:0b:
e5:af:18:53:2a:cc:3d:e7:7c:c6:a5:2b:4a:32:71:f1:b8:fa:
dd:c9:1e:e4:27:80:45:8b:77:c5:14:83:20:b2:a5:ad:4c:35:
a8:bf:bd:fe:ba:00:3e:48:45:f6:4f:48:d0:08:b5:72:ad:57:
e2:b1:ed:c9:8f:7e:e7:73:ea:1a:ba:14:cf:5b:09:ac:68:94:
95:f7:60:44:af:b1:d2:7a:b5:09:33:ad:8a:4e:be:71:22:53:
7d:bd:53:87:37:b6:3b:bf:d4:80:5c:76:5f:39:04:12:2a:76:
8b:6e:06:a2:3e:2e:56:3a:19:31:5b:7b:81:0e:df:af:1a:dc:
44:7c:8b:e7:5f:6e:b5:81:74:6b:b7:55:ce:07:a9:6a:da:95:
2c:47:34:99:8c:5f:18:32:4a:c3:77:d9:8c:a3:62:00:47:b5:
7d:a1:9d:00:ce:e3:42:84:f2:0d:ae:cc:35:e8:ea:17:04:e0:
64:27:a3:42:b1:8d:e7:8e:99:12:11:90:42:99:cd:9a:a1:3d:
d8:ac:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:34:05 2025 by rpki-client