Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: 63plXyAjq/LliEQ/rXa8aE39NUw4VBZA+Lm66tnObdo=
Subject key identifier: F1:35:E0:6E:36:4E:C0:66:18:63:23:31:8E:92:61:66:32:87:14:AA
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 0199FB7CBB11963FB4D80AF052AD5FE4FA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 13F1
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: yBVRiZlPueDpY77iNbBiFpJveCbG4eEik1PFAYlnSZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bb:11:96:3f:b4:d8:0a:f0:52:ad:5f:e4:fa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=f135e06e364ec066186323318e926166328714aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:e6:43:53:ec:f6:a0:50:05:2e:8d:21:c7:
98:5d:3c:a5:08:2b:e6:20:63:07:ca:3e:ad:2e:0f:
bb:80:35:2c:f2:51:c2:ee:5b:42:83:d4:d0:0b:b5:
0a:a8:e7:98:d5:59:c8:10:a6:9d:67:9c:99:19:ed:
73:81:00:6c:72:1f:b1:c5:cf:5d:f0:cd:9c:3c:54:
96:9a:66:e0:b8:de:37:89:f9:2f:b2:6a:47:1d:e3:
17:07:55:72:f7:bc:6e:18:7a:00:ec:34:61:60:a6:
71:d6:18:33:86:b8:78:44:4b:60:12:3d:08:f3:80:
78:31:0b:e4:e4:2a:cf:54:48:b5:93:c3:29:18:74:
2f:a0:93:81:13:9f:4c:ab:32:0f:92:d3:39:5f:54:
12:e1:a7:ae:fe:b6:ae:1f:4e:02:db:0a:10:64:26:
be:25:ef:03:42:da:fc:55:45:d1:78:ab:39:86:51:
f7:ad:6f:c8:0a:b6:c5:ea:e6:f6:1b:56:9a:7b:fc:
50:2e:a6:e7:3d:54:03:e9:6a:7c:00:4b:00:35:ac:
11:10:97:ea:00:d9:a3:70:46:8f:c8:f3:83:fe:fb:
4d:aa:2f:86:5b:4d:41:be:cf:e3:09:7d:20:fd:b6:
d6:58:40:24:f2:d4:13:b0:b5:24:71:c0:a4:16:26:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:E0:6E:36:4E:C0:66:18:63:23:31:8E:92:61:66:32:87:14:AA
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1a:10:90:a1:bc:5c:df:63:1b:fb:ca:32:dc:3f:f3:38:5c:
55:45:6a:da:f0:f8:22:04:1c:cc:5b:ed:16:4f:e8:57:4a:09:
2d:81:48:bd:3c:a9:b9:2c:b8:21:af:e6:82:03:14:22:3a:97:
9c:27:74:ae:fc:10:2c:45:68:cf:3b:c0:b0:0f:b5:6c:e0:4c:
db:74:42:d5:8e:73:81:4b:b4:c8:06:5d:d2:a0:01:28:b8:c9:
85:41:5d:0d:43:7d:48:91:4a:f9:f5:78:d1:0d:c9:7d:17:4b:
b6:47:62:16:96:f2:7e:8d:ff:bd:f1:a0:10:ca:ed:a1:d1:2d:
82:ae:84:aa:8e:d2:b3:81:1e:f8:03:fe:dc:81:ca:9f:b9:97:
8d:57:5d:11:9c:63:bc:ea:f7:23:54:b0:90:11:8a:d1:f9:01:
40:dc:a9:71:21:ad:ef:5d:f3:03:be:cd:5f:d4:13:68:69:c7:
d0:d2:a1:e9:fb:0c:ef:86:a6:01:fa:45:c8:69:3b:e0:09:13:
f0:d3:90:e7:29:73:a1:e8:98:e4:fd:e3:79:63:d7:fa:0e:8a:
2a:af:5d:b4:1f:48:17:a8:4d:5a:17:c4:e7:7a:be:9b:5d:23:
f5:36:a5:6c:80:f5:16:0e:1a:4b:a5:87:71:98:ff:05:37:66:
be:54:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:37 2025 by rpki-client