Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: p8EBTX004lu93wYyPL9Z7/gpdzO0ywYc72aLzJXY9OQ=
Subject key identifier: 9D:C3:FF:87:4B:7A:1F:E7:5D:42:35:5F:51:47:9F:54:0A:B3:DF:5B
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 0199FBEAFDA4923FD4F92A7CD61CD7B261E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0A8D
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: dsjo7hGOEP8fLn4BVrJb2iey07kuvs7mLGL4ncao/Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fd:a4:92:3f:d4:f9:2a:7c:d6:1c:d7:b2:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=9dc3ff874b7a1fe75d42355f51479f540ab3df5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:a2:41:f2:ee:03:f2:36:c0:0e:77:89:48:
e3:77:3f:30:85:66:ae:f4:82:f8:21:4c:c4:25:d4:
72:ed:fd:94:13:c1:17:6c:bf:f7:c4:a1:ec:a0:df:
bf:d7:48:66:d3:70:5d:37:7c:7a:93:46:2a:73:7a:
16:72:80:05:01:c7:6e:21:c7:20:4f:c1:9a:c5:1c:
a1:ef:d8:0a:94:32:78:db:7e:23:2f:fa:22:5a:48:
71:d6:ed:ba:a2:c3:3b:90:bc:41:e6:d8:2a:85:f7:
d7:6d:5e:e9:9d:96:92:d0:c6:ba:d3:5a:bc:59:f2:
f8:19:cf:5b:23:f7:f5:f7:46:20:26:ec:24:63:45:
04:5c:37:4e:dc:b6:dc:2a:7d:6c:7c:63:cf:a1:c6:
66:0c:12:bd:18:f8:39:8a:71:5b:f8:93:63:38:28:
89:83:86:24:13:02:a7:85:7a:46:36:6b:a5:db:ee:
af:0a:da:c7:ac:e0:29:eb:9f:e5:24:81:a1:87:05:
d0:b1:41:ff:d4:45:0a:49:b1:71:d2:30:7f:76:a1:
bf:34:0f:47:58:1e:e7:73:eb:2f:d6:2c:ce:23:ea:
52:06:99:b4:4d:d9:3a:21:d7:ad:5d:22:5b:6d:6b:
23:a1:82:1d:22:6f:32:9e:91:ea:cf:1e:68:cc:c6:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:FF:87:4B:7A:1F:E7:5D:42:35:5F:51:47:9F:54:0A:B3:DF:5B
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:25:66:b9:e3:d2:1c:e7:34:56:b8:54:8e:5f:6b:06:dc:33:
b5:a1:e6:0c:db:61:f7:8c:d9:a9:ae:a3:f3:26:ec:71:71:af:
87:20:58:da:bc:13:32:61:7d:67:db:51:9c:37:97:6d:8d:41:
65:59:fa:8e:fa:58:78:0b:71:37:9a:d5:29:e5:9d:b2:35:47:
2d:96:4f:22:d3:de:7e:b3:de:8f:b3:4e:76:75:5f:fa:53:d2:
ca:4b:b9:f8:47:11:29:da:1f:e4:54:a4:6e:14:fc:d5:f1:aa:
c1:81:60:b0:0c:84:65:c1:fa:04:61:8d:0b:06:ff:f0:6c:ff:
3c:89:a3:cd:c7:d5:9a:03:e7:5e:39:11:89:2c:f6:d7:5a:84:
fa:a6:38:02:fd:c6:97:37:49:9a:b4:75:17:8c:5b:f8:3a:b8:
a3:a6:01:76:8a:ac:fc:4d:d5:21:f0:af:00:06:e9:2f:55:fb:
09:28:48:ca:f5:3d:e5:49:a9:40:f4:cd:9f:20:97:c9:98:aa:
e9:f6:b7:21:c0:4d:3a:81:cb:6a:d8:14:e4:66:a0:4a:c7:aa:
1d:63:aa:e0:4f:38:0e:34:8a:43:19:c4:c6:13:32:25:dd:4b:
d5:ec:64:48:c6:a2:1e:77:40:f6:aa:35:db:32:70:4a:b2:1c:
42:f1:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:52 2025 by rpki-client