Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier: 2e7AtHK3MIvausJ2LlzLLLDGyZUqlhUsR3qFLfwjRsI=
Subject key identifier: 90:86:10:41:F9:CD:B3:A8:9D:5A:B2:EE:3F:B0:26:7A:2C:D9:A4:90
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0199FB0F20698B3D52A378DC444C22BD8620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number: 0854
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: HNhvGCyDd+x/tN2BGI41yBaINBohd4Aqnae30KoQf1s=)
2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:20:69:8b:3d:52:a3:78:dc:44:4c:22:bd:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=90861041f9cdb3a89d5ab2ee3fb0267a2cd9a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:98:68:1d:a4:2d:f9:f6:3e:c7:94:cf:4e:
b2:82:34:74:73:8e:de:d8:3d:7b:fa:54:b1:13:6c:
5b:fc:02:20:66:18:32:9a:19:f5:26:39:3d:84:e9:
82:ad:d2:11:ec:81:cd:5d:e6:05:2f:f8:93:cc:3d:
90:96:3a:92:ba:2d:1e:cb:0c:b3:b2:30:82:86:9c:
6b:c6:14:8f:88:a6:03:2b:4e:5b:40:21:38:4c:e1:
9f:3f:8d:3a:72:4f:fd:71:1d:ab:ce:44:1a:0c:a9:
cd:55:47:90:b6:f7:42:63:c9:82:4b:2f:37:22:46:
8b:8d:cc:90:cc:44:18:36:b7:de:a3:c4:56:52:0c:
d7:30:41:5e:dd:ed:fb:fe:01:38:8d:75:0a:f3:0b:
c8:79:ef:78:cd:d8:59:ca:97:34:65:a6:86:d5:54:
3a:b8:ab:b4:25:4e:e3:13:ff:5a:41:aa:b9:eb:b2:
dd:63:65:ff:8f:43:38:52:c6:0a:12:6a:85:44:d9:
31:26:1e:51:62:cc:82:1a:0d:49:ad:22:09:b7:3f:
41:78:59:cd:f1:63:25:ad:d2:29:f2:d7:5b:da:72:
aa:fa:fd:c7:05:94:1f:2d:d8:9c:4c:c9:c7:86:1f:
e6:48:f4:25:96:0b:ee:5f:72:d3:3e:96:ff:65:07:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:10:41:F9:CD:B3:A8:9D:5A:B2:EE:3F:B0:26:7A:2C:D9:A4:90
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:d9:f0:8e:f3:d2:9c:db:7d:b2:15:b2:21:a7:8d:ff:84:
90:67:6d:ba:1f:74:ba:33:78:6c:69:61:f7:7d:e3:29:af:fc:
73:34:b8:06:62:3b:7b:95:6a:a2:49:05:b7:ac:b4:97:de:f0:
d8:4f:d4:04:5e:5a:2a:1d:1b:33:37:45:b3:c4:5e:ee:03:1a:
a3:73:d0:74:3d:35:54:cd:47:2d:94:01:ef:a2:16:b8:1e:8f:
db:35:0f:a4:29:60:ab:7d:c6:18:cd:68:c7:c1:bd:fb:fb:1a:
bd:ba:0a:05:10:1e:a9:5a:e7:8e:a7:d8:f1:ca:81:36:34:da:
ae:d6:e6:7d:11:42:aa:f2:48:b6:37:1d:a0:91:3d:04:58:c5:
42:f9:0d:b9:c8:0b:e7:a5:d0:4c:e8:60:e0:16:ad:dd:c5:74:
be:24:35:43:d7:0c:73:ce:ab:dc:04:38:7a:67:02:1b:4c:ae:
14:9c:ef:3e:00:49:07:bd:97:db:c7:4c:a3:7e:5c:36:b3:3e:
52:c7:9f:6c:73:d5:10:99:03:b8:a1:82:fd:80:71:6b:17:ac:
13:64:d9:d8:32:1a:45:96:3b:de:5e:56:07:ce:09:c3:53:22:
5b:25:de:50:3d:e7:9f:29:b0:f3:15:f0:2f:66:42:8d:9a:ac:
4a:2d:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:30 2025 by rpki-client