Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: cZYe/J716Fctl5IfImYIAABHu+zdDNqsssomc6UO4Ws=
Subject key identifier: 46:15:08:38:D5:87:E7:B3:CA:DD:A7:39:33:8E:96:4C:F8:9C:E7:69
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 0199FC8FAF0D04A5CF5FC8A78CFC1AE3A5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 13F1
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: Xs4tTTZX2VTPelloXoEx6CNmbIfi8oqYwialZMf/JyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:af:0d:04:a5:cf:5f:c8:a7:8c:fc:1a:e3:a5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=46150838d587e7b3cadda739338e964cf89ce769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:dc:5b:15:94:d0:0d:25:08:af:53:e5:14:
04:c4:06:17:c7:74:ff:45:e6:f4:ba:2b:9a:0e:48:
a2:2d:b9:fb:fb:c8:ff:e8:14:fe:0f:ae:6f:83:5d:
5c:39:b9:16:4b:fb:3c:f7:82:99:b7:ac:0e:d1:8a:
48:23:03:9e:e2:c8:c5:f1:15:12:74:69:7e:db:0c:
52:1d:38:94:56:69:6f:12:c5:f5:31:81:b8:e7:7d:
f4:e2:9f:59:36:8e:98:f6:19:3c:8f:7a:65:97:d1:
86:9a:f0:a3:b9:a4:8c:af:f3:c6:c3:f3:45:82:15:
8b:1e:23:ee:ba:41:96:28:8b:56:db:82:bb:c6:2f:
ad:2f:83:a0:a3:02:75:30:e6:dd:73:41:16:e9:6f:
04:9b:4d:a6:39:2a:3f:1c:bb:c4:a1:34:72:7a:cb:
aa:43:9c:64:5b:56:9a:8b:89:b1:6c:a7:3b:85:e0:
c9:01:19:49:75:17:2f:5c:52:5e:98:f2:eb:8b:e4:
8c:57:ed:1c:df:bb:c4:fd:94:91:2d:ba:e2:56:93:
87:34:42:66:bf:ca:05:b2:75:db:34:a2:98:53:9f:
66:00:22:cd:2a:26:e6:ce:f0:d0:16:0c:f5:ed:b4:
75:bd:9b:64:74:85:69:b5:ec:ec:bf:dc:34:a9:8b:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:15:08:38:D5:87:E7:B3:CA:DD:A7:39:33:8E:96:4C:F8:9C:E7:69
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:ca:0b:f6:e4:b5:57:86:ef:36:24:6d:ba:07:66:f9:b8:
a4:2c:ca:5a:42:cf:f3:e8:51:44:c7:04:e8:e2:f6:05:38:a7:
96:14:d3:62:4a:18:2b:b8:cc:65:b2:5f:e7:cc:3a:99:79:37:
c0:3b:7f:59:d9:ea:b7:61:7a:ea:fb:4a:7e:de:1d:01:b5:64:
0d:89:d0:a6:06:38:26:a8:b1:2c:48:9c:e9:11:8f:84:2d:6a:
2f:67:b2:d9:52:0b:60:00:44:0f:64:38:0d:6b:eb:b5:41:65:
70:e5:a9:fe:41:c1:68:21:8b:0e:96:e3:d1:a9:ac:86:a0:32:
9c:ef:02:fd:26:68:f1:35:e4:65:15:28:57:6d:a6:73:f4:91:
54:34:c9:a5:a6:4d:ad:91:ed:3f:4c:a1:1c:0d:fa:d1:4d:14:
19:3b:71:6e:10:98:c8:76:9f:e0:fe:d5:07:f7:ea:99:e7:a8:
b7:06:bd:68:1c:8f:a8:db:d6:8f:be:a2:99:21:ea:41:f6:f3:
ec:5b:89:4c:d3:ab:7f:8c:f8:07:27:13:c4:16:d4:3c:b7:73:
f8:52:51:77:11:70:be:3a:5c:8e:cf:e5:89:ab:5c:1c:2c:12:
cb:a2:9c:67:4d:a5:52:cb:95:bd:0c:ab:ab:36:85:c0:35:8c:
15:71:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:42 2025 by rpki-client