Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: oKgPoBAm2IeKSmrOepacnhf8VdOAe5qoGBqyuYzlSl8=
Subject key identifier: 0C:13:E1:AD:A6:F1:5D:CF:9D:10:2B:1B:C2:D2:80:93:09:D5:E5:0C
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 0199FB45D4E85A292FC35435C51D67E7F50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 4D
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa (hash: KmHgJDlPkXFpo1uiCXVfBs7N0PdhXHFV0wyXs4DH/BA=)
2: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: GfNXwBV/mDdhGLvKalYAFwKiRPdlHNOCVz1UF6+LbO0=)
3: aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa (hash: MGV2Z9M1at0wNrbd7sJUTfzjsFPuLQEHyaT+MULw+wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d4:e8:5a:29:2f:c3:54:35:c5:1d:67:e7:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=0c13e1ada6f15dcf9d102b1bc2d2809309d5e50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:56:32:cd:ea:1a:36:56:d3:5c:bb:76:1f:
c8:b0:fd:f3:b5:53:5b:70:be:2d:e3:9e:11:97:33:
0e:b0:5d:f9:7d:25:5d:a0:3b:c0:1a:d8:ad:a5:16:
23:63:13:96:89:1d:9f:5e:3f:34:bd:1a:33:8d:4b:
b7:d1:18:26:79:a4:7d:45:73:c9:a7:91:f9:77:ff:
79:d6:14:90:94:d0:57:54:fa:cd:09:68:fe:3e:bb:
20:cf:3a:90:90:77:a2:5e:23:7e:3f:ee:e5:54:33:
cf:90:02:96:89:3a:99:34:bf:40:32:d1:e6:4e:2e:
57:32:87:5e:21:df:35:f6:9d:9c:ce:64:17:e9:ea:
6f:83:c5:d8:3c:e8:ad:82:3b:a5:61:cf:af:03:bf:
5b:bc:43:f9:f7:d9:38:b9:89:16:af:41:c1:a7:06:
19:4b:ab:fb:49:ed:ef:9b:b3:b6:cd:d3:15:dd:04:
8a:a4:bc:c4:fb:70:16:1f:ed:fe:53:f1:a2:c5:8e:
9d:d1:dd:5c:02:1a:fe:84:42:a0:ab:22:ae:d7:ae:
22:f7:42:41:80:2a:6f:bf:34:90:73:c1:a0:35:56:
13:82:2e:a3:f7:e8:dc:76:a6:8f:98:f9:82:9e:63:
c4:2b:ad:bd:23:86:da:6f:5d:a0:8f:45:dd:93:59:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:E1:AD:A6:F1:5D:CF:9D:10:2B:1B:C2:D2:80:93:09:D5:E5:0C
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:56:53:8c:c0:dc:c0:36:10:8f:d3:42:87:d6:ae:8c:f2:1e:
e7:60:f4:2c:f3:07:ed:b0:cd:54:15:47:66:4b:8d:ee:90:4c:
40:ee:35:c0:4e:95:fb:f2:27:ef:c7:08:51:92:48:62:3d:1f:
6a:4a:6a:8c:0a:91:59:03:ed:24:94:6d:84:ff:e5:ed:9e:07:
0f:a7:b4:30:b2:e6:87:02:a0:30:88:ae:8e:e7:dc:84:6c:52:
db:21:ce:9a:9f:f8:6b:71:df:d4:09:e6:97:6f:a7:1d:f2:e1:
4b:53:4f:bb:0e:d5:56:e6:da:3b:25:40:45:ef:9d:db:2e:72:
51:bb:e8:05:15:0f:57:cb:22:08:a9:ac:66:b1:34:6c:14:00:
a4:96:1a:f1:e8:95:2f:c5:93:96:ab:3c:ee:6d:13:9b:f9:88:
6c:df:85:f1:3a:5b:fe:4c:99:ef:87:4d:ad:a0:61:63:b8:f0:
c7:fc:be:5b:20:a6:ca:6b:dd:7e:1a:df:86:c8:30:31:a5:4a:
16:ae:d2:e3:39:f0:2b:a8:0b:23:e3:c6:00:a9:ca:e9:62:69:
0c:7e:af:b0:d1:10:88:ef:26:d9:16:45:09:b4:17:24:9f:7b:
c9:0a:1d:44:8b:bd:57:67:de:14:51:12:99:c2:eb:cb:1e:dc:
e4:62:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client