Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: 6hvn4lwGz2ByVneEX7Koen8we4umejGLH3exVaZDE8U=
Subject key identifier: 91:9F:BC:E4:94:8A:20:51:F3:32:18:11:27:70:DD:1B:51:BF:18:EF
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 0199FE7D7BC9B72FDB84366456CB95AF338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1301
Signing time: Sun 19 Oct 2025 22:01:00 +0000
Manifest this update: Sun 19 Oct 2025 22:01:00 +0000
Manifest next update: Mon 20 Oct 2025 22:01:00 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: C4G3NxcE4zcVvVbf+GVL6WVGiyQjnhkY6gAC2IT9amY=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:7b:c9:b7:2f:db:84:36:64:56:cb:95:af:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Oct 19 22:01:00 2025 GMT
Not After : Oct 20 22:01:00 2025 GMT
Subject: CN=919fbce4948a2051f33218112770dd1b51bf18ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:ca:02:5a:ae:b5:cf:02:81:55:17:b6:ea:
1b:3b:d3:9f:89:2b:33:d5:22:f6:51:ec:16:8c:8a:
9f:c3:f7:54:82:ff:dc:a3:ce:ba:13:33:fa:7d:e2:
91:f9:4d:f9:1e:ef:c7:8a:04:f7:c6:4b:57:73:9b:
00:bb:cb:e6:86:e3:8b:49:4a:cd:da:42:1b:c0:23:
15:89:c1:0e:a8:53:41:31:63:fd:30:02:62:fa:74:
04:65:a2:9a:e6:c7:6f:17:f9:13:d1:c7:19:33:9c:
04:36:2e:08:3e:9a:ca:71:8f:88:3e:22:30:6c:73:
f6:2d:05:79:bf:6d:2b:4c:b2:04:96:b9:0f:31:56:
99:b2:5f:3b:6c:30:99:88:1a:46:3b:99:22:04:49:
84:a4:36:3a:b3:59:84:5f:b7:05:d1:aa:1d:71:5e:
50:7b:98:f1:97:8c:96:fb:df:b9:97:5d:67:26:5b:
8c:38:07:a8:60:be:7c:d1:1d:c6:a7:3f:d0:75:d7:
f6:9c:71:b4:c0:9e:60:1c:52:14:f2:99:f1:a4:8d:
86:e7:52:1e:ec:6a:12:50:73:79:8b:6e:49:33:ed:
a3:2d:95:9e:30:04:24:bd:18:f2:3e:70:b0:7d:42:
90:8e:aa:16:20:9e:07:9b:42:b3:53:d8:2d:6e:61:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:BC:E4:94:8A:20:51:F3:32:18:11:27:70:DD:1B:51:BF:18:EF
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:a8:73:c3:02:d3:76:29:4b:a1:9c:09:9c:eb:44:1b:16:
5e:74:f9:fe:f5:57:fc:ec:86:2d:78:dc:05:89:8f:5c:14:37:
9c:ee:59:03:e5:93:1d:dd:61:88:08:bf:eb:0b:ef:e8:44:a7:
c2:3c:0f:80:15:e0:77:f4:2d:8a:bf:b9:07:d8:cf:68:7b:ea:
1d:eb:fd:01:21:00:a4:09:fd:aa:b1:4f:bf:b4:a4:70:9c:89:
eb:51:c4:d8:68:4a:69:fb:a1:df:76:35:f9:19:7d:d1:61:f2:
d2:3c:b6:6c:e9:5a:3c:68:a8:62:74:31:53:74:8b:2e:49:1e:
56:52:89:16:a5:59:84:15:98:9d:b9:6c:08:49:33:4e:b5:e8:
fd:db:23:68:74:fa:29:f5:49:41:f5:30:c9:06:96:ed:a8:7d:
e7:ee:23:0e:6b:b0:2e:74:31:37:25:c7:67:9e:a4:d9:f6:51:
6c:7f:22:c6:ac:db:05:78:93:dd:96:90:04:f7:5b:d1:59:76:
04:18:63:cd:6a:81:93:29:9f:24:44:fe:ff:d2:e2:f2:89:64:
fa:99:27:f3:06:da:23:f4:d2:8c:43:31:d9:40:c7:81:a0:48:
3f:e6:cf:dc:78:7a:bf:b7:ec:4d:e7:ee:54:b4:73:0c:e6:2b:
2e:f9:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:24 2025 by rpki-client