Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: JBbCj01f5OXQPEBN65OXWgk+LxO6Sd3LwBOHiaYhwbQ=
Subject key identifier: 0F:E4:1D:B6:95:41:EB:28:D1:9A:FA:E9:59:33:34:4A:F5:3B:0D:E1
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0199FC214822C6FDAE0067E1BA3C114F07D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1305
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: HQdGKZk1+U2Hfjg3y4wnS/3UyTwC8sUXjj0rl8yy6pc=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:22:c6:fd:ae:00:67:e1:ba:3c:11:4f:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=0fe41db69541eb28d19afae95933344af53b0de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:da:8c:9f:59:ba:b0:5f:c4:e7:1f:81:c0:
55:cf:a6:c0:20:82:ce:bf:fc:52:cd:b9:83:47:6b:
9a:60:ee:c2:8f:62:b4:83:68:48:cc:ec:ff:7e:77:
0a:3f:05:e5:12:e5:10:8b:e9:08:bc:3e:b3:35:5a:
52:a6:e1:b5:cb:4d:d3:6f:33:9c:9b:8c:0f:2e:8d:
eb:28:23:dd:c0:71:be:83:10:12:00:87:3a:b0:35:
7b:98:ac:b9:9b:e4:fa:86:65:bb:b8:e7:a1:59:3c:
dd:a3:c8:04:b8:ec:43:b3:c1:c5:b2:da:df:c7:94:
e1:ba:18:09:1e:21:58:0b:e6:b0:0f:18:63:27:fd:
52:db:6f:39:77:94:0f:72:1e:c0:48:0e:d7:9d:f9:
07:9b:03:51:ab:b4:9a:ff:70:2e:33:c6:73:df:c2:
f4:9f:e3:e3:bb:07:e9:43:3b:9a:ba:8b:1c:32:29:
46:14:71:3d:fe:6a:54:32:b5:5d:05:12:36:48:2d:
47:35:14:de:3b:6e:bd:50:0d:ca:12:6b:88:35:17:
b7:b7:33:90:3a:52:a9:8a:65:e9:73:d3:11:36:23:
11:a3:f4:e1:30:0e:99:5a:03:7a:7a:4a:6b:d1:84:
04:d1:40:a0:39:eb:d8:ee:20:fa:8e:8d:cc:41:19:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:1D:B6:95:41:EB:28:D1:9A:FA:E9:59:33:34:4A:F5:3B:0D:E1
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:95:3d:c3:06:8d:cf:c3:19:ad:cb:b6:aa:08:1a:29:57:9c:
75:84:1d:53:a5:18:ee:21:94:61:4f:bd:a3:bb:e5:fc:8d:ce:
a4:16:98:4c:e7:a5:f8:5c:c7:64:cb:97:80:53:e3:a4:f6:cc:
ca:ec:14:1d:e5:21:f1:75:05:ba:76:eb:0c:8b:d7:c7:e0:ce:
8e:c9:fc:9e:48:8f:88:57:6f:27:3b:28:ff:03:cc:e9:66:bc:
86:57:7e:2b:1e:e4:72:b3:3a:22:e0:f8:aa:38:37:08:64:bd:
07:5c:44:69:6a:41:bf:b9:7d:95:3b:b0:40:40:ec:df:1f:50:
f7:86:7c:41:8b:2b:aa:4d:ba:45:27:89:90:e2:53:5e:67:32:
ab:d1:71:d1:38:95:c1:4c:82:11:bb:be:95:67:47:bf:1f:92:
41:79:34:d3:52:fa:e7:1b:1a:61:89:2a:48:01:28:61:fa:ec:
dd:28:1b:0d:8e:db:7d:65:2a:2e:47:a3:84:b5:a8:7b:04:8c:
f4:2a:e8:2c:ca:64:18:19:c0:b7:8b:3b:9c:e2:c9:37:a7:94:
fe:a2:af:90:6b:7a:83:3b:e6:78:8f:5a:b7:24:e1:08:11:36:
7b:bf:58:68:fb:87:c7:fd:51:18:64:1e:91:b0:8d:78:50:3b:
03:c1:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:04 2025 by rpki-client