Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: gp5U2YwLYPBLA9A0C3Pz/XZ3TsF8fwPXqV2qatJDs+0=
Subject key identifier: 60:7C:A3:8D:FB:6F:18:8C:ED:7C:E0:29:21:92:02:68:08:46:B5:AF
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 0199FF228DAA03C44D4EF8F18AD21E4635B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0D9F
Signing time: Mon 20 Oct 2025 01:01:18 +0000
Manifest this update: Mon 20 Oct 2025 01:01:18 +0000
Manifest next update: Tue 21 Oct 2025 01:01:18 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: 6wNz6T9AfejqexaZY1RzCz1onHkaIIqSHqK1hHmr2A4=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8d:aa:03:c4:4d:4e:f8:f1:8a:d2:1e:46:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Oct 20 01:01:18 2025 GMT
Not After : Oct 21 01:01:18 2025 GMT
Subject: CN=607ca38dfb6f188ced7ce029219202680846b5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:59:f3:3b:ae:d2:e3:23:42:fd:0d:c2:a9:
2c:28:e3:c9:ca:dd:2e:8a:8a:46:38:fa:a6:7a:9e:
21:ff:0b:b2:5a:f3:8a:d6:15:e0:e4:1c:59:03:7b:
b9:b8:49:e5:2f:3a:31:9b:a4:a8:1b:c2:d2:8d:6b:
d8:85:60:d5:8c:eb:b0:5d:a7:e1:b1:2d:6b:d3:69:
2b:5c:88:fb:fd:4d:fa:dc:e7:40:01:e5:4b:27:28:
0f:26:cc:67:a2:fd:5f:e7:1c:e9:ba:c8:5c:65:9f:
a7:21:05:0c:01:7d:6b:2b:c1:85:0d:fa:4a:79:6c:
2a:cb:41:be:19:a1:3f:11:3e:10:d8:29:02:40:da:
df:2d:e2:9c:a0:4f:97:ab:d9:52:cb:ce:ea:86:52:
04:35:88:cf:91:ef:bb:4d:a8:77:79:0a:41:a6:c4:
7d:d2:24:b9:a7:74:9f:93:e8:6d:f3:b2:9d:2e:24:
b4:91:c5:1c:5b:76:ee:fd:7c:83:f5:e0:4d:69:62:
cc:c6:af:c3:57:79:a0:0a:fd:75:0b:6e:61:75:cf:
dc:8a:2c:56:a0:cd:45:01:40:46:92:83:78:50:21:
f8:ea:87:77:4a:93:85:7a:7d:f3:e5:d0:c7:d7:18:
2d:9e:30:71:72:4a:fe:b0:3d:fc:f7:41:e0:24:4f:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:A3:8D:FB:6F:18:8C:ED:7C:E0:29:21:92:02:68:08:46:B5:AF
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:86:08:c1:cf:1f:27:84:6f:75:23:05:ea:a0:6f:23:08:
1b:29:c9:bc:51:8e:28:a9:5b:45:8c:bd:12:06:16:a0:9b:a6:
a7:58:dc:13:66:f8:f4:fb:9e:dc:bf:51:6b:e6:ba:66:78:c6:
68:a1:30:0d:bf:bb:92:4a:5b:ae:4b:83:bf:63:9a:bc:85:40:
af:c2:04:a9:5c:35:a3:d3:cb:f4:d1:6f:f8:06:e4:93:f8:85:
0c:ea:19:b0:64:87:58:bd:02:ca:8c:1d:dc:ce:29:b5:61:ed:
c8:c7:33:27:2f:8b:41:73:aa:ef:7c:94:bf:3e:b5:ac:bc:98:
e6:33:e8:9e:90:99:76:0c:3b:3e:5f:00:6e:98:22:ab:e8:e4:
b7:6e:5e:ee:41:b8:71:6b:58:2c:0a:9e:dc:aa:ef:cd:55:19:
af:fd:ee:82:0e:28:4b:93:9b:62:31:de:3b:2c:3d:7e:25:ed:
5f:9c:a9:20:77:04:9f:4d:d0:df:9b:9e:c9:d2:a2:3d:6c:12:
49:6c:b2:35:70:a5:04:20:45:d2:f8:87:3d:e7:69:c4:3a:e0:
08:7f:d1:20:5e:8c:cc:ed:c0:35:94:aa:e0:28:79:4c:64:d4:
fe:68:a7:74:f7:0f:65:9c:c6:c1:64:48:77:98:7d:f5:32:3e:
4b:12:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:14 2025 by rpki-client