Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: 24MPH9o4XVFrNDRXCnac6vUERiZ4aGVms1zNVynqwuE=
Subject key identifier: 48:6E:3C:F8:AE:B3:77:BB:C5:4E:EB:0D:04:D8:35:77:A6:4A:5B:90
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 0199FE4734CC14A840DD1006DA7BC377F66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0A2B
Signing time: Sun 19 Oct 2025 21:01:43 +0000
Manifest this update: Sun 19 Oct 2025 21:01:43 +0000
Manifest next update: Mon 20 Oct 2025 21:01:43 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 8dYCV7ASzqdjC4J4eBHxWmNl3MIRD2WAWrCq97ppjP8=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:34:cc:14:a8:40:dd:10:06:da:7b:c3:77:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Oct 19 21:01:43 2025 GMT
Not After : Oct 20 21:01:43 2025 GMT
Subject: CN=486e3cf8aeb377bbc54eeb0d04d83577a64a5b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:d7:47:bf:57:f6:2d:1f:87:71:9e:74:d5:
67:f5:22:44:ad:71:4c:a6:1f:b6:6c:88:b1:33:fe:
d1:e5:a7:46:28:69:02:b9:33:e9:99:ce:31:f5:a7:
de:6e:af:a1:af:e1:a7:92:d8:13:3c:2e:7b:76:ee:
21:4d:d5:99:51:0f:b9:76:d7:a2:94:31:ae:ed:4d:
dc:10:23:51:6c:d2:96:63:96:59:07:63:0a:3e:68:
01:30:57:4e:ff:cd:16:0e:65:5e:57:36:7e:a8:97:
4b:b8:34:97:2a:a8:2b:62:75:fd:4c:2f:89:4e:61:
e3:f5:32:05:8a:04:df:1d:83:2e:af:f0:e9:28:be:
63:48:4f:da:21:5c:e9:b2:7b:19:6b:01:96:18:7b:
c7:a5:56:3a:4a:76:f7:d0:fb:01:f6:86:9f:c7:4a:
7d:9a:18:ea:1c:a0:93:8e:45:97:f6:ff:23:88:d8:
a5:3b:d3:05:e4:ac:e5:ed:88:5b:41:f5:2d:df:c2:
ba:33:14:3b:e5:6f:f5:70:08:e4:c5:fb:04:d7:0d:
a5:92:fa:89:ca:34:e7:74:1c:34:0b:b5:9d:18:1b:
61:a4:63:db:c3:52:78:0d:52:e4:4a:a0:27:da:b1:
c6:fe:38:7a:31:2c:80:42:b1:2b:2b:88:ae:cc:ef:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6E:3C:F8:AE:B3:77:BB:C5:4E:EB:0D:04:D8:35:77:A6:4A:5B:90
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:7a:2e:7b:9b:2c:3d:fa:19:97:81:8b:e3:ce:65:9c:a0:
15:ac:de:c6:8c:78:4d:15:3b:d3:ee:15:b5:7f:85:59:94:af:
44:f9:3b:78:bb:39:5f:71:66:7b:e2:09:f9:10:d0:ec:1c:5c:
e2:78:dd:04:5d:ff:40:9b:f8:58:a0:02:86:78:5c:cd:d8:16:
c5:28:5c:8e:31:16:31:68:aa:6e:06:25:63:d8:57:d2:92:32:
1e:c8:97:7e:c5:62:6b:34:7f:bc:f2:2e:6a:23:1a:7e:55:d0:
d6:10:3d:b3:e0:c3:ed:87:ea:41:c6:9d:ba:e7:31:c4:39:79:
06:43:25:4c:ab:e9:19:a7:99:96:c3:a5:f9:73:99:7a:06:a5:
e3:c9:65:ac:4a:f2:1d:75:0c:50:75:d7:a7:3b:d7:35:53:90:
e2:6c:2b:18:a2:73:95:90:62:5c:eb:f8:07:97:20:f4:6a:41:
70:fc:6c:9d:df:ff:f8:9c:33:c0:c4:27:08:92:d9:7b:0e:ba:
99:65:74:cf:12:3a:39:43:1b:8d:22:1b:13:10:74:03:51:c6:
bb:f4:2b:68:08:7d:da:74:30:ad:64:fb:ef:9e:14:46:b4:d8:
f4:00:d9:e2:85:6d:a1:ba:9d:8f:29:37:3c:c5:ca:10:4e:2b:
b2:57:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:02 2025 by rpki-client