Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
File: F9elKrbseLxKdZt8RmMqo-Jgsug.mft (raw, json)
Hash identifier: Ddf7lUpnx+spVwD+Vk+efoMTWzPSCJ7ATjWTMM0tmH4=
Subject key identifier: 90:13:8C:F1:E8:4C:FA:BC:31:BB:08:B0:16:55:83:A1:71:BC:4A:70
Authority key identifier: 17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
Certificate issuer: /CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Certificate serial: 0199FC8F61DBB5AE796DB7758B84526916FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
Manifest number: A7
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: F9elKrbseLxKdZt8RmMqo-Jgsug.crl (hash: 6TkioP74ESUuIDZ9RzwThPNF+FcHkno00GMDK1qG3io=)
2: sbMYQYJxwfNPp6440gILA9mzbx0.roa (hash: RnVE2MTd07RWpWjHS41qs+TCVp95W8O0zBW8ou5pEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:61:db:b5:ae:79:6d:b7:75:8b:84:52:69:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=90138cf1e84cfabc31bb08b0165583a171bc4a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:4c:6b:bd:bd:ba:05:e9:1e:66:b0:2a:be:
32:2a:b8:47:92:bd:16:60:c3:12:8c:a0:58:d1:e4:
7c:1e:a9:e2:1f:28:7f:ae:31:3c:85:a8:3e:fb:cf:
f6:6d:bf:ba:64:fa:86:56:1a:08:f1:86:02:a4:03:
58:8a:29:93:1a:e2:31:1c:9a:6b:30:25:df:80:ac:
69:7e:20:d5:66:9f:9b:70:c6:76:65:a6:36:d9:2a:
7a:7a:f0:cf:0f:f1:cc:a4:a6:e8:09:c0:ad:62:af:
dc:a9:ae:02:de:d4:18:77:d2:75:1e:b0:3b:d8:19:
08:cf:30:7f:da:14:72:b9:8a:2a:be:fe:87:11:d2:
e3:60:c3:ed:3a:d8:b3:53:19:0b:a4:e9:56:ac:f3:
3e:0b:12:06:5f:22:01:56:25:66:ad:0c:88:5c:06:
f0:5b:a3:f8:22:c7:9d:16:48:7d:0d:72:5b:5f:b4:
57:78:99:af:ad:af:bf:ed:e8:4c:2c:9e:7f:65:fa:
51:96:2d:ae:a3:66:db:a6:3e:55:0f:d6:7c:f8:c0:
54:c8:19:20:cc:3e:43:00:52:72:a8:1b:8c:cf:5b:
47:89:6a:80:81:a4:61:5a:1b:1d:40:69:bc:3a:55:
03:3e:3a:4c:ac:5b:fc:34:80:7c:39:d7:64:22:8b:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:8C:F1:E8:4C:FA:BC:31:BB:08:B0:16:55:83:A1:71:BC:4A:70
X509v3 Authority Key Identifier:
keyid:17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:31:d9:52:50:2e:d2:cd:44:7a:a9:84:b7:8b:3b:10:64:
9c:7c:5a:ce:87:63:ab:45:02:34:70:6d:78:1b:13:7a:75:c3:
73:61:85:2b:a1:5f:85:cc:60:c7:b4:89:44:89:d5:be:49:7e:
a4:0c:ae:64:98:12:83:e1:10:e4:9d:37:d8:61:8b:4e:6a:4e:
63:a2:c6:5f:fc:a4:9e:5c:f2:61:d0:a0:ca:e1:87:c3:ad:b9:
dc:4f:14:a5:9d:7c:a1:3a:fc:d1:4e:61:7e:ce:a9:f6:b0:5b:
76:82:ae:44:83:69:b4:fd:3d:c6:aa:1f:00:4c:09:e8:60:39:
39:d1:d6:0e:73:81:7a:f9:e5:70:a9:68:4e:d6:eb:13:bb:71:
fd:eb:02:ac:c6:16:b2:c4:aa:1a:05:26:d0:fe:a6:3f:04:6e:
f8:83:9c:9f:c2:2a:b8:51:3b:cd:9b:c7:7f:91:b4:76:40:d9:
83:10:45:b8:31:14:4d:aa:fe:c4:06:c0:d7:99:8b:9b:f2:1e:
a9:da:fe:ab:e0:57:67:b7:65:3e:0d:3d:5a:c4:f0:2d:f0:7b:
6f:ae:6c:79:00:a7:bc:5a:0d:9f:90:4b:63:3e:aa:db:a1:e5:
da:b2:e5:cc:79:07:67:5f:8a:e7:06:ba:e5:5b:38:bf:ea:e9:
81:3c:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:44 2025 by rpki-client