Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: ctK3Vfz4VSKa6Y3KjC7WKFUaC9IQ9ZzVcyjJbhTlJM8=
Subject key identifier: 40:04:42:D3:71:67:C9:0D:DF:E8:9B:FB:BB:03:50:D0:2F:59:40:A7
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 0199FD6B5DCFF7C0B322598BE51DBA4B91A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 12D4
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: aI3s5YlNGnc0uUBiFc742QBGi+K4eRYipS8JvBR0tDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5d:cf:f7:c0:b3:22:59:8b:e5:1d:ba:4b:91:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=400442d37167c90ddfe89bfbbb0350d02f5940a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:f1:03:56:b9:c4:89:a9:1b:c8:91:30:02:
5a:4c:71:93:35:01:49:3d:d8:cd:63:3b:84:fe:49:
b9:9d:35:fc:a5:62:47:13:79:1b:f3:6f:fd:26:67:
29:a5:d9:4b:69:0c:15:3d:c7:45:2e:4d:03:ef:cc:
de:b7:64:f3:6b:52:23:07:43:54:7e:b4:1e:9e:21:
76:1f:32:8d:53:56:5b:2f:6f:bd:fd:50:ac:29:85:
e4:48:90:70:14:a3:69:33:fc:46:61:7c:0a:12:c7:
0d:0a:d6:7e:6c:81:14:be:6d:ab:b0:fc:40:4a:11:
f2:08:a7:66:6e:61:f1:f1:3c:ed:7b:c0:5a:01:df:
92:d8:c1:c3:53:70:6a:a4:a3:d5:6d:7a:01:21:1a:
2e:2d:21:30:87:bb:24:79:81:9f:f0:ed:21:ee:36:
43:24:24:ab:e7:37:80:ed:19:f3:57:34:b7:2f:59:
a4:09:dd:88:82:22:7a:b7:e5:70:48:fd:19:26:a3:
4d:3a:46:9e:55:d5:0a:ba:c2:eb:1d:6e:4d:aa:fc:
e5:8e:80:1f:cc:2f:79:96:24:8f:21:01:c9:1d:96:
e7:c9:67:08:85:87:94:dc:22:f8:a4:d5:7d:22:f3:
09:92:bc:db:9e:5b:e4:4f:18:95:b8:1b:8d:22:71:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:42:D3:71:67:C9:0D:DF:E8:9B:FB:BB:03:50:D0:2F:59:40:A7
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d7:e6:92:2f:41:3e:48:96:8a:20:e0:b6:3d:cb:1b:90:ca:
fd:76:44:4a:4d:4b:5a:b6:28:f3:3a:59:73:8e:8f:04:f8:e2:
97:a5:19:b7:17:54:19:0a:29:96:b7:86:19:49:0f:b6:99:73:
d8:ea:f5:10:f0:c3:00:67:29:9f:73:38:96:c7:7c:b5:53:03:
11:65:c7:ff:9b:ae:19:9f:be:93:fb:42:86:54:be:42:c3:72:
cf:8a:62:40:60:d8:ae:b1:0e:72:8b:9d:12:82:ac:1c:78:6f:
7f:70:ce:cd:42:aa:f9:37:2a:52:d8:0d:53:87:69:9c:7b:71:
1d:ef:7a:a8:c8:a2:0f:b0:f8:82:d9:b2:be:77:1f:99:30:ea:
07:a9:3f:bd:11:5e:30:1b:bb:af:5b:15:77:68:e0:de:05:ed:
1e:a0:82:a7:0a:f2:3c:55:55:96:72:a7:97:1b:fd:5d:15:1a:
dc:59:2c:40:e2:cf:dc:52:08:42:b6:b4:a4:4c:eb:1d:a6:f6:
21:2a:cc:9f:ca:ea:80:50:6c:49:80:d4:f3:db:87:cb:69:78:
93:fd:f1:98:17:6c:f1:69:c8:cf:5f:c9:b7:bf:f0:8d:2d:53:
a5:5b:59:73:07:ea:a4:1a:48:da:85:49:30:5e:8c:89:ce:1a:
ab:28:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:28 2025 by rpki-client