Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: YENEm0jjlj4c+b60J+HVTYz5zmCWCjj/TYmf4eByLKI=
Subject key identifier: 98:16:09:1A:A4:CB:8A:59:18:56:E0:D3:B3:64:49:5A:F4:A1:65:C3
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0199FD6B1DDFAB0A84EB4C9AA93391EBDEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: 2U/iOVh0R0CdJYgW5gD6txS77ton0SxykGrMSNj/cl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1d:df:ab:0a:84:eb:4c:9a:a9:33:91:eb:de:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=9816091aa4cb8a591856e0d3b364495af4a165c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:98:ca:dd:43:ac:e0:80:b2:1f:5d:07:00:
84:a1:b1:0e:a2:f7:b8:fd:be:46:8b:93:da:cb:99:
6b:11:1f:a9:c9:4e:ba:34:3d:e3:cf:76:fd:f0:14:
d6:b8:33:7c:63:03:40:8e:07:48:3c:7a:a8:e5:27:
ab:66:17:86:9d:ce:b2:f2:a2:40:12:84:06:ca:6a:
a0:3f:25:b5:43:92:7b:e9:74:26:8f:c9:b7:ba:e6:
f5:06:a6:49:e7:28:85:19:e8:8e:be:ea:26:f2:b9:
a8:7e:5a:31:c2:e9:45:63:45:da:6f:98:56:fc:c8:
27:f5:ea:c5:04:8d:86:91:4b:13:da:87:1e:1f:cd:
f5:e7:8e:32:aa:c7:61:16:43:80:df:a4:6b:fe:e8:
88:17:15:5d:14:f4:22:16:bc:12:11:31:8c:bf:f6:
6f:18:1a:f2:cc:22:b1:82:06:05:dc:8f:83:60:18:
09:02:ac:43:ad:cc:dc:a5:0c:1a:42:02:cc:52:f3:
90:95:76:56:af:f1:e3:09:52:27:78:83:17:ca:47:
aa:ce:ed:d4:5e:82:22:97:8c:70:6e:00:21:1b:52:
08:af:33:7a:9a:40:13:c1:dd:04:ed:a8:5b:8c:e3:
7c:04:e2:bc:e2:20:ac:62:d1:e0:b2:99:47:6a:57:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:09:1A:A4:CB:8A:59:18:56:E0:D3:B3:64:49:5A:F4:A1:65:C3
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:99:0d:9c:76:12:24:e6:32:7b:28:94:4c:3c:89:c4:6f:
8a:fa:4a:9b:53:6f:4c:0b:5f:94:02:56:71:9f:56:4e:0c:2d:
b5:6e:1b:45:d0:e8:ad:b7:68:46:20:32:ec:1a:ad:65:a7:49:
8c:34:ea:95:73:94:61:55:93:5e:33:a0:db:4a:f7:1d:55:c4:
eb:2a:f1:56:6a:da:a1:52:9c:ca:47:98:1d:7c:f9:80:90:74:
e7:30:14:91:e8:2e:1a:1b:f7:e8:43:98:80:d9:ab:aa:28:16:
58:61:25:8c:2c:de:c6:e7:c0:c6:20:91:91:f0:d1:b4:46:cd:
42:76:da:84:36:79:66:94:18:5b:47:85:23:c8:11:4d:f3:e8:
8b:d0:b0:63:a3:63:0e:2a:6f:23:ed:d0:73:b2:c2:eb:36:ff:
00:ce:c1:40:45:b9:21:5e:37:d9:a1:88:ee:41:bc:6a:fb:c8:
76:44:e8:1b:6d:1a:ed:31:07:b6:f3:2f:f3:ff:ae:09:f9:c7:
7d:59:b7:19:87:cf:f8:c9:f1:71:67:f7:f9:36:e6:ed:0c:f9:
7e:72:9b:55:d5:e5:d5:e2:b9:18:3b:90:04:d8:44:bb:49:e1:
29:14:59:2f:b0:eb:4c:0f:2c:0e:f8:4f:36:d3:86:21:d3:4e:
09:99:5c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:29 2025 by rpki-client