Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: QRZm0BPMGjHA4n9A1+ocUV4iJW4z+SQ1HYxj91MgbQ4=
Subject key identifier: C3:9A:3E:5A:57:E3:0E:FB:12:64:D8:A3:AF:F4:C8:A9:7A:60:41:9A
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0199FD6B4514367B8455BF70EBCC0BCEB08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: XnRNsgaQD15qujhc3Fc5Wn9h7E6fEjor+kjCQGgK084=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:45:14:36:7b:84:55:bf:70:eb:cc:0b:ce:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=c39a3e5a57e30efb1264d8a3aff4c8a97a60419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:ec:ea:15:0a:c7:38:99:3d:47:dd:da:08:
f6:a6:7d:75:e5:cb:fe:78:e1:62:59:5a:9d:dd:cc:
d3:1e:2a:34:30:4f:73:5a:8b:9a:0f:4f:6f:83:6b:
10:3f:0c:26:fa:0e:f5:c0:5f:6b:f6:33:93:8d:fb:
72:91:75:3c:6c:e2:69:40:57:13:e4:08:13:bf:07:
65:78:23:63:6a:8c:81:f0:9b:92:56:3e:18:f0:11:
d4:17:8a:1a:27:cc:26:83:a6:5d:af:ec:a0:be:bb:
48:82:48:21:54:fd:a6:0d:0f:a0:96:ae:0c:4e:7c:
87:24:91:14:bf:8e:9d:2e:3d:c3:f1:49:95:52:d9:
5f:39:16:1e:6e:e7:ef:7b:d7:17:bf:cb:91:97:25:
78:6a:5f:2c:e6:91:6d:fd:57:67:18:f9:a6:fa:b4:
e9:69:42:02:23:c8:a6:d6:08:10:18:02:a8:8d:32:
28:4f:11:ce:b6:bb:8f:00:44:99:c8:f1:e7:ef:04:
17:8d:d3:a9:ab:3c:cd:e7:21:26:76:79:1e:79:96:
9a:8c:db:98:86:3b:66:d1:fe:4c:66:8b:09:c7:f5:
a9:af:70:9c:65:b8:1f:f3:3a:c2:ce:f1:9a:ef:b4:
42:8b:de:d5:56:6a:17:85:f2:a4:8d:39:34:0a:11:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:3E:5A:57:E3:0E:FB:12:64:D8:A3:AF:F4:C8:A9:7A:60:41:9A
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:e2:a6:72:b0:4e:32:16:c8:20:0d:55:99:2e:e7:81:aa:
1e:9a:54:fb:25:d0:a2:bb:93:52:c6:34:d9:25:38:ca:e1:56:
db:11:36:47:6e:ff:bb:09:97:09:5e:8b:76:94:e0:1f:2a:c8:
90:8a:95:f7:54:45:25:2f:cf:df:c3:25:57:52:b5:b3:e3:8d:
d0:88:d7:d8:a7:27:83:ec:a4:52:03:5d:36:01:61:75:23:2c:
b7:e7:a9:78:b5:a8:4d:0d:dd:75:2e:4d:19:d9:43:e1:b6:74:
0e:4f:fd:d2:12:d5:38:93:1e:11:05:ad:0d:11:91:4a:0c:34:
bd:ee:f4:74:6a:b8:e2:9c:32:b8:71:02:c4:2e:84:c1:48:7b:
ec:eb:2f:0f:96:94:f2:ff:03:06:8e:d4:c4:d1:90:07:81:fe:
c3:5e:98:79:59:2a:26:02:70:28:87:eb:97:9a:af:34:f6:10:
be:d4:c7:9b:44:7b:ee:e8:4a:3a:7e:8f:e8:95:5b:4b:6e:c6:
47:a3:7c:a9:11:a4:c8:fc:47:65:07:b5:3f:1f:94:f7:d1:34:
94:77:bf:7e:0f:8c:2f:b3:95:47:69:31:cc:2d:12:60:72:4a:
00:c6:77:04:2b:d4:48:9e:b1:c6:70:35:4f:47:d8:66:1c:5e:
8d:1c:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:13 2025 by rpki-client