Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: 3bCDPwcNUMOleHhgWzLvIZ24jZYLlah3nZ+ueFrTMFA=
Subject key identifier: 3A:4D:7D:90:31:B2:3D:01:1F:84:11:08:BC:23:00:79:18:7B:7F:12
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 0199FB7CC54259434AE1F3DD23D882BC82DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: KkK2VWdMVJVIGY3JHr417lqZn4EOwCcdN2ZGJng1mSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c5:42:59:43:4a:e1:f3:dd:23:d8:82:bc:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=3a4d7d9031b23d011f841108bc230079187b7f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:f6:9d:c7:48:1a:43:c7:85:fa:6e:99:02:
a2:22:72:16:ed:ab:b4:59:1e:2e:7a:22:5e:f0:77:
6f:55:fd:de:c9:23:43:e9:4d:c6:38:4f:79:a2:89:
58:c8:6b:9d:1b:6d:d8:0c:2e:79:5d:20:27:a6:b6:
6a:65:ec:db:81:1e:73:b6:28:c9:e0:1e:6a:e8:59:
a1:90:1d:eb:49:ec:62:45:2f:97:7a:79:62:6e:d2:
b1:74:9a:a2:ea:9a:dc:e3:a0:51:39:0e:37:70:ce:
5e:6c:f0:3d:75:17:bf:54:5c:bf:5a:3f:fc:70:d5:
3a:8f:db:b8:44:9b:da:17:f7:3d:7d:4c:ff:a4:b1:
e6:46:2b:ec:41:81:ac:ba:3a:e9:b2:3b:6f:f3:a0:
01:eb:99:a0:93:2c:1c:b0:db:ba:f9:21:f3:0a:bf:
b4:32:a0:40:6a:46:c5:23:96:2f:01:f7:59:4a:3c:
76:34:ff:0e:b3:eb:16:02:40:46:79:cd:b2:b2:4c:
46:9e:c3:e5:1e:96:d0:e8:39:81:db:75:37:72:99:
d1:f5:c4:e3:0f:73:74:59:92:db:b2:76:5c:98:0f:
fc:46:d5:5b:24:d0:df:7e:12:84:dc:97:ab:44:9a:
a1:9e:60:c7:55:6d:01:14:8c:dc:55:06:2a:7a:1f:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:7D:90:31:B2:3D:01:1F:84:11:08:BC:23:00:79:18:7B:7F:12
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:bf:b1:88:d5:a9:6e:ad:ac:05:a9:af:50:24:bc:b4:5f:
53:bf:5f:4e:a6:2c:0c:81:3c:90:69:7b:7d:0b:98:b2:b2:5b:
c8:18:f1:87:da:b9:d7:2d:cf:c6:10:74:f3:de:b0:c9:7b:ca:
c7:0a:53:71:d8:f3:56:f9:18:57:15:83:88:b6:eb:97:26:44:
f9:ea:03:16:52:81:0b:f5:88:29:bb:47:14:32:34:4a:66:30:
a1:32:74:ce:22:64:1f:fe:5a:c6:a0:8b:eb:80:15:cd:54:72:
ac:49:27:be:10:35:49:49:58:ae:34:14:05:98:f7:0d:87:41:
21:04:82:eb:d7:46:d3:6e:00:14:19:12:f6:4f:9a:6e:4c:eb:
c5:ac:62:4d:7b:7c:c1:3e:4a:9e:3f:4a:93:73:6f:2a:aa:c8:
7e:8d:1f:f1:ef:9a:52:c3:40:d0:fd:f8:c2:c0:19:56:60:09:
b1:36:6f:d3:10:4d:0a:b9:de:85:ca:b9:1d:58:dc:9d:51:30:
77:af:f3:cf:e0:e1:86:7e:06:a8:37:d8:91:07:99:20:ee:38:
11:7a:53:5e:3d:bc:16:e8:d5:07:7b:b9:ac:8a:01:10:7a:be:
c8:23:ef:f8:cf:e4:72:06:e4:b2:b5:a3:c4:f4:d6:5d:2c:a0:
b1:9a:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:29 2025 by rpki-client