Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: LitTWNF5cjuJWmHUPlZgSb0kEVxa+LW6jmGrCISqPQ4=
Subject key identifier: F5:39:5B:BB:8F:73:D5:05:9F:EE:60:49:01:8D:A7:F4:38:C7:FB:06
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 0199FCC62C9A659EA83DFC1C50D335C09D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 09C8
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: XEec++NQwnYYSIPvK0RwrJlKsPRdzWSwjXVLzHKI3PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:9a:65:9e:a8:3d:fc:1c:50:d3:35:c0:9d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=f5395bbb8f73d5059fee6049018da7f438c7fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:d8:cc:b7:6c:3b:63:70:ed:67:d3:a7:c8:
12:19:13:3c:0a:7a:7b:28:6a:b3:40:98:7d:d6:05:
0f:43:01:67:a7:2e:55:1d:30:ab:0b:1a:8f:a5:9b:
db:50:58:58:2f:e1:97:e0:9f:7a:11:fa:7b:33:4f:
84:07:ae:3d:df:3c:39:2a:a8:83:85:55:b9:a3:7c:
82:21:a9:c0:8d:8f:fc:f9:07:cf:ce:9a:ac:b7:a2:
f0:88:23:6a:bc:09:c1:80:00:07:71:5c:81:5b:78:
5b:80:0a:71:55:43:52:06:4b:61:29:fb:34:f7:de:
53:8e:9b:21:9d:6b:17:61:ec:09:70:14:be:ff:c4:
17:be:3a:34:c5:14:bc:17:1d:bc:44:90:b3:d8:6b:
4b:ea:40:81:87:99:44:55:6d:f9:40:5f:8e:48:36:
89:db:a3:37:ca:a5:2a:29:ee:df:ad:13:49:e7:81:
b5:ca:3e:a4:13:55:04:04:69:7f:f6:ef:04:4f:e5:
71:d7:b3:46:15:4d:43:91:f8:29:d0:0c:d4:12:b7:
02:a3:aa:f4:23:73:ef:ad:19:6f:f1:c3:5f:ab:89:
d2:f7:a3:5b:a8:16:93:22:90:9e:73:d1:81:18:c3:
db:41:48:43:46:a0:59:f8:a7:51:52:a2:db:85:01:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:5B:BB:8F:73:D5:05:9F:EE:60:49:01:8D:A7:F4:38:C7:FB:06
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3b:8d:91:1c:94:b4:32:96:45:c7:15:3e:a6:22:16:07:1f:
87:a6:57:e6:ee:58:8c:3c:9f:6e:97:59:b3:4f:f1:e0:76:a1:
ad:f4:ba:66:52:54:b1:b5:32:8f:63:75:57:30:c2:8c:a1:9b:
3e:bd:b2:5a:fe:d9:72:7c:7a:77:5a:45:99:40:42:cb:23:08:
f1:17:4d:66:a9:ec:87:fa:1f:08:aa:b1:2f:1f:72:f6:ca:98:
b2:84:0e:44:17:7f:7c:28:6b:55:30:fb:4f:65:ab:bd:ca:c1:
ff:67:e5:41:05:30:95:c7:3f:a7:c0:68:9e:fa:0b:c1:13:d1:
45:07:ce:45:46:d9:0f:55:53:ec:99:b6:18:f8:4b:4f:1d:49:
06:17:f0:d0:62:aa:5d:ad:d0:d3:ac:88:b8:d0:3b:91:22:b4:
ab:c5:97:80:b8:49:16:46:4a:3a:c4:e6:4e:00:90:99:73:54:
56:df:41:3f:98:0c:ff:dd:28:1f:d3:ad:9f:05:60:ba:81:af:
28:1d:3f:29:d2:7d:3d:5b:d8:6a:67:34:93:61:f1:ad:fa:c9:
76:34:9d:9d:92:34:0e:62:d6:e0:b3:a2:4a:af:48:ec:ad:95:
df:a3:a2:eb:f4:b6:69:e9:b0:25:b4:7b:f5:27:60:28:31:03:
8d:bd:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:35 2025 by rpki-client