Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: 6mzOBETsWlkROhTcJe8Ji6FzhpkctiH+4TE9eUjVky4=
Subject key identifier: DE:E5:10:EA:35:CC:CF:B0:81:F4:AF:EE:75:C0:2C:15:A5:F6:39:6F
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 0199FEEC1155C84EE41C6B5C0E9FDE5AA643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0AB6
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: O7Gxq7wNhKpD2G7+ccYBKg63LLuVCdN4SUqryERQLR8=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:11:55:c8:4e:e4:1c:6b:5c:0e:9f:de:5a:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=dee510ea35cccfb081f4afee75c02c15a5f6396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:26:dd:d4:0b:2b:44:84:0d:3f:bf:8c:7f:
df:d3:38:ce:a5:a0:cb:65:8d:73:1f:9f:f6:c2:8f:
f5:8e:f1:f7:88:f4:76:db:90:9d:9b:3a:61:81:69:
29:c1:08:c8:d5:08:50:b1:3c:a0:5b:95:3c:bf:b5:
97:30:8b:3a:4a:7e:94:81:e6:df:13:c9:69:06:e2:
38:7f:2c:88:6a:33:f7:3a:b6:1e:e0:14:cf:90:98:
94:da:29:65:34:6e:c2:b3:50:c3:44:df:be:88:68:
b4:8d:67:3d:e2:03:96:24:06:d5:44:de:86:c6:e5:
9f:c9:f7:e3:c0:ac:82:de:b5:33:51:d4:34:72:7e:
95:84:77:33:da:a2:20:49:c6:2c:e8:37:03:a6:af:
63:17:e5:94:ab:0c:2e:8a:e4:b6:3c:0d:d7:da:58:
54:82:1a:32:92:6d:86:e3:0e:60:2b:5b:a2:29:56:
af:ec:a8:a2:30:08:ce:44:6d:cf:63:78:2e:93:cd:
bc:a6:15:be:2c:a7:17:c4:4c:3e:6f:df:44:22:30:
4a:91:b8:a1:01:9f:27:88:58:bf:28:39:c9:81:83:
b6:cf:a5:38:88:28:85:28:20:fd:51:e7:c7:d2:fe:
60:6c:e2:81:27:a5:d7:43:d9:5a:10:22:a4:4b:b0:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:10:EA:35:CC:CF:B0:81:F4:AF:EE:75:C0:2C:15:A5:F6:39:6F
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8d:18:d6:88:ca:c2:6f:9b:80:fe:2d:c2:d2:d1:fc:c2:63:
65:41:21:52:84:f5:0e:cd:54:bb:6d:4e:96:23:66:cc:76:d7:
f4:f6:0a:f0:32:66:07:9b:e2:7f:3b:4b:c9:75:5d:26:5a:2d:
f6:cb:6f:72:8f:0c:33:8f:39:b9:af:64:d6:97:30:bb:67:f3:
5c:ec:37:7b:08:d0:36:a5:a8:0e:58:7a:84:4d:f2:56:d0:10:
40:6c:ac:1e:23:6f:26:b9:1c:93:6f:8e:b9:3e:b7:4c:fb:7f:
a2:7b:8d:9e:a6:b7:30:39:13:c6:62:e8:96:76:4a:d5:67:a0:
bc:27:a7:7d:46:8b:e0:e9:65:ea:c9:a2:8b:76:ed:b0:e5:e0:
8c:7b:7a:95:cf:37:02:7c:30:8b:08:fa:31:43:ca:8a:d8:8f:
cf:7d:95:54:ef:9f:d5:2e:11:27:ef:86:48:36:d2:bd:09:66:
7a:9b:60:b3:7e:43:f1:23:22:2a:ee:70:62:70:5c:88:14:d4:
5f:8c:65:75:18:63:77:96:23:6f:3d:a6:b6:90:36:c4:8a:e8:
43:d3:40:18:fe:22:b3:35:01:77:12:d6:53:43:94:2f:32:0a:
37:39:b8:a9:71:ef:78:c1:c0:84:17:e2:96:cf:34:d6:6e:ae:
43:fa:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:43 2025 by rpki-client