Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: 5hzaR2HHngEpwATDtzvXTKASj406kPab0kdc5aCV0Kc=
Subject key identifier: 62:80:70:9F:74:B4:D5:1F:1F:E0:74:96:D4:8D:F1:E3:3F:92:CB:55
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 0199FE470E627E699089BC47C7CF6CC1C13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 0424
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: U5WZrtWOfoeHr7Sfhe5ijmLHlxt5L8O0VoTDWniJ8II=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0e:62:7e:69:90:89:bc:47:c7:cf:6c:c1:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=6280709f74b4d51f1fe07496d48df1e33f92cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:19:88:41:d6:da:ef:3e:60:1c:b5:b1:86:
7d:8a:9d:48:df:58:9f:30:5f:7a:e5:88:21:74:5d:
d6:29:48:49:22:6e:ca:e2:f8:77:50:dd:a0:69:92:
08:2c:ef:00:7b:bf:7a:27:b9:dc:17:68:54:f1:8f:
93:44:6c:d9:ea:a4:80:3d:a5:72:a9:0c:0a:a2:4d:
8e:ef:d7:88:95:64:0b:30:1a:15:06:58:4f:0e:6f:
12:4a:67:67:b3:17:bd:1f:a9:a1:d1:99:98:9e:97:
5e:26:46:25:8b:8e:19:95:42:55:6c:b9:44:80:e1:
ed:46:43:05:ff:95:bd:14:a6:3f:68:63:9b:8f:1a:
4a:4c:29:40:71:e4:20:b9:91:43:87:13:e1:08:35:
4a:5c:43:4f:48:75:ce:c7:90:ab:0f:23:85:de:42:
7e:e2:8a:c3:24:58:70:b0:45:06:5f:56:1e:96:d8:
09:ab:1a:0d:29:80:36:55:5e:6a:cf:8d:18:ef:ca:
dc:0f:d8:56:61:bd:ee:c1:16:40:09:7a:c8:55:46:
79:ba:13:cb:7a:a0:90:f3:d2:40:d4:52:84:bf:57:
eb:8a:5a:a8:ef:64:35:0b:0a:19:d8:18:7d:44:0a:
63:41:d9:73:15:53:d9:8c:ff:23:34:46:34:7a:34:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:70:9F:74:B4:D5:1F:1F:E0:74:96:D4:8D:F1:E3:3F:92:CB:55
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:1e:66:fd:23:ee:56:97:4d:ae:d8:c4:b1:ad:24:55:b5:
13:7a:63:9f:59:77:03:6d:dc:b6:e7:9c:0b:83:ef:b0:8c:02:
41:d7:2b:ca:24:53:29:9e:e4:e1:79:f2:c4:2a:27:03:ce:a1:
7b:a0:db:f7:35:77:05:c8:ce:e6:91:c2:29:a2:ed:a7:16:64:
f3:49:4b:81:26:ce:28:d0:66:18:af:7e:ae:2b:5f:5b:db:d3:
32:0b:2e:8b:90:27:79:39:d1:dc:52:68:d1:ff:86:50:10:f5:
09:1f:cc:e8:20:e7:f6:09:8a:99:b0:db:cc:f3:1c:ad:ec:d0:
70:0e:37:77:ad:47:a8:d9:e0:cb:8a:10:87:2f:5a:87:c1:f9:
24:67:f2:59:25:83:0b:3e:8c:ce:e8:7c:1f:1f:6e:6d:24:ce:
43:54:2d:ad:58:18:f1:83:74:30:d5:83:9d:cf:50:ac:64:a3:
bb:4e:8f:38:c8:9a:87:66:71:a3:95:b7:8b:59:53:08:50:51:
7d:28:5d:58:e9:08:14:0a:69:20:ba:7b:05:4f:28:9d:0b:cb:
bd:80:50:67:86:78:8a:36:91:cf:54:b2:02:6e:91:17:60:f2:
c6:77:0f:19:6f:6d:b1:30:89:b2:13:1d:04:3a:f1:86:1c:2f:
82:30:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:33 2025 by rpki-client