Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: 6SyHUiGCRUlrYf2FtzGMQQ3ZABRKFIgVf2MVeC7bv8k=
Subject key identifier: 0C:5B:FC:CB:02:63:A8:60:CB:AD:8F:D8:72:76:32:60:FC:87:3B:29
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 0199FAD7D85031C108958A10EF65FA9FBE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 12C8
Signing time: Sun 19 Oct 2025 05:01:13 +0000
Manifest this update: Sun 19 Oct 2025 05:01:13 +0000
Manifest next update: Mon 20 Oct 2025 05:01:13 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: El53Ln3MO1wtcDmRldKABYjM+pbbMCd4O6wvEDK5ZH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d8:50:31:c1:08:95:8a:10:ef:65:fa:9f:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Oct 19 05:01:13 2025 GMT
Not After : Oct 20 05:01:13 2025 GMT
Subject: CN=0c5bfccb0263a860cbad8fd872763260fc873b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:3a:82:f6:ad:4c:d8:f5:53:12:f6:15:d6:
d5:25:96:75:a4:62:5e:b1:25:fc:56:65:da:b3:80:
81:9d:1c:14:bb:c0:8d:af:7f:3b:3d:1c:13:29:1f:
59:3b:d5:0b:9b:95:a0:3f:c0:73:59:09:98:d9:29:
71:37:54:41:9d:15:3c:6c:d0:ab:80:84:4b:83:55:
6a:ad:51:a5:8f:3d:ba:e5:64:45:05:97:5a:e8:58:
ee:52:b2:76:75:c6:39:1c:7b:83:e8:a8:5c:8c:64:
79:0a:36:e5:cd:45:8b:9c:87:07:bf:70:60:70:98:
fc:60:09:d3:b7:6a:3f:66:c2:65:24:7f:ed:1a:10:
2f:a3:f6:83:ad:ec:84:42:4d:6d:5e:c8:62:a7:26:
22:9e:31:82:47:98:04:e7:88:85:94:ab:14:02:2f:
63:e1:6a:90:7b:20:3b:18:1d:fe:77:66:98:57:94:
20:e7:c7:d5:89:23:56:12:29:53:a0:88:48:37:b9:
42:ed:21:ef:60:06:7d:0c:0e:a1:2f:28:ac:56:61:
50:ea:38:b6:12:54:d0:65:40:84:86:b2:66:c3:3f:
3c:b0:4a:8b:76:04:b6:42:ef:0d:80:38:4d:e1:7a:
58:77:ad:85:18:e0:d4:f9:5e:c5:93:75:17:4a:88:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:FC:CB:02:63:A8:60:CB:AD:8F:D8:72:76:32:60:FC:87:3B:29
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:a4:64:f4:c5:fa:87:5d:52:cc:cd:e8:66:3a:c0:4c:5f:
b8:4c:2f:68:cb:73:89:b2:95:06:c5:61:34:62:3f:cd:f8:1c:
5d:41:fd:7d:b5:e1:3c:25:1e:4b:a7:73:9f:d1:ae:97:d0:75:
10:d6:04:a3:7d:6c:63:72:1e:e6:28:91:c7:ab:65:73:3e:eb:
3b:f1:49:af:f8:23:99:7e:87:ad:b1:5b:ba:40:b2:08:ee:95:
d5:83:da:af:60:52:c3:5a:0d:73:2e:ad:34:dc:8c:c7:1d:fa:
60:4e:0e:f2:38:48:98:38:d1:aa:17:ae:b8:f0:4e:4c:e1:2c:
c0:9f:b8:7b:11:41:0d:66:2d:fd:6e:bc:d8:9a:90:86:d1:63:
a9:b1:8a:a4:81:66:91:ac:47:06:be:13:a6:84:3d:53:6b:17:
ad:f0:fd:30:78:13:7d:ca:a6:3a:4c:74:d4:9a:20:5d:0c:85:
57:b4:16:78:6f:8d:fa:ff:b8:70:a8:91:41:50:65:27:59:87:
38:16:0f:1e:ef:bb:13:a9:ac:c5:0b:07:76:f7:0d:14:53:09:
4c:94:c6:04:fe:92:79:70:61:ea:2f:2d:fd:ae:2b:25:40:46:
8a:47:fe:50:b7:02:c9:9f:06:c6:4b:8d:ba:1f:33:a5:a3:c4:
ac:29:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:39 2025 by rpki-client