Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: J37fndIP61fCvRHuUTGfPGCCQ4o9XaUKvWzpsfPxhKY=
Subject key identifier: E9:A0:B0:D1:D8:8B:8E:B4:05:8C:90:39:86:9B:29:78:F4:2B:40:A4
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0199FB0ECCB432E1387F23DEA642162AA632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: KgqVHqobhaDuMGdEEqRe7PkYyvRbMSukT21sSHWbBQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:cc:b4:32:e1:38:7f:23:de:a6:42:16:2a:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=e9a0b0d1d88b8eb4058c9039869b2978f42b40a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:a6:98:0a:21:62:05:f9:1f:98:0a:cb:0d:
9d:56:2f:5b:3c:c4:63:1d:30:cc:9f:ce:a5:7c:71:
fd:03:9e:fc:70:80:33:c0:49:e8:32:34:9d:07:fe:
bd:25:5d:6d:10:e0:64:ce:c3:d2:87:f3:1d:0e:b6:
72:03:9a:6d:da:16:ef:b6:d2:9d:a6:6a:12:af:c9:
9a:6e:e1:77:25:36:11:4c:a6:69:25:fa:01:53:81:
14:cd:ba:12:8e:83:83:1c:04:a1:af:c1:0b:95:65:
d8:a3:5b:0f:97:99:e0:7c:f3:ed:70:78:cf:38:84:
51:17:01:da:e3:56:69:4f:7d:8e:ea:50:ea:d5:9a:
a8:44:3d:73:b6:97:ee:e9:83:c1:10:53:de:2a:c0:
b5:ef:5e:42:3e:8e:ed:39:09:c6:e5:37:a9:5c:79:
b1:92:24:be:78:4c:a2:7e:8b:70:40:c9:79:f7:84:
9e:e5:e6:b1:ad:eb:75:ea:8a:f5:2f:f1:95:85:d6:
5d:c7:5b:c9:e9:7a:74:cc:01:84:09:de:c2:db:6e:
45:8c:36:65:ae:9e:e0:00:36:bc:8f:fc:a3:fb:0f:
07:f2:9e:87:99:fa:a0:77:34:b2:2f:6f:b7:89:ac:
5b:ca:35:e2:11:e0:bd:25:9e:70:39:b6:51:e5:6c:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A0:B0:D1:D8:8B:8E:B4:05:8C:90:39:86:9B:29:78:F4:2B:40:A4
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:17:ab:14:7c:9b:5d:01:16:7a:68:73:e7:58:d6:af:81:a5:
11:9b:cc:ab:2e:31:b1:9f:2b:85:15:ed:7f:67:2c:c3:a6:02:
07:90:62:bf:82:61:18:a8:dc:3e:09:73:4e:65:73:16:e5:73:
7b:8b:1f:ce:15:f9:1b:c1:aa:4b:5d:b8:d2:50:7a:d9:35:ff:
fd:ab:d7:8b:c9:5b:35:0d:f3:27:39:da:95:98:7b:ca:26:8a:
f2:9d:f6:bd:a5:80:4c:76:72:9a:a6:04:6b:78:1d:a5:68:d8:
a2:07:34:c0:c5:d9:44:28:3a:a4:c4:e6:b3:79:aa:be:25:fa:
24:7a:db:fe:35:84:10:bb:1c:06:e5:ad:8a:8c:eb:1e:2f:b8:
a6:48:17:f6:3e:f5:db:04:d4:d8:57:7d:86:a9:11:ca:07:57:
96:56:a9:bb:55:de:f0:0d:b0:1e:78:43:db:6b:98:dd:92:7f:
e7:c0:38:a2:a5:62:c5:a9:5f:5d:40:df:96:c2:cb:b8:58:7f:
a4:a5:0a:0b:c8:02:0e:d3:70:41:7b:81:76:f9:ba:af:f6:5b:
df:dc:32:e7:20:44:92:f2:fe:54:ae:c6:ff:04:06:9b:7b:ba:
ed:b3:cb:9d:ff:b3:26:1f:5e:38:11:a9:68:47:fa:7b:cb:3f:
7f:a1:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:23 2025 by rpki-client