Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: WPYVaOYSOFwdeRZh0lXLcVctaoeM5yihNvUI+7J7iCM=
Subject key identifier: 54:39:C9:29:37:09:2C:41:B6:AC:B8:E9:67:A7:36:44:9F:70:3D:F8
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0199C569F8B9E5A856CCD00D58C062920A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 16CD
Signing time: Wed 08 Oct 2025 20:01:20 +0000
Manifest this update: Wed 08 Oct 2025 20:01:20 +0000
Manifest next update: Thu 09 Oct 2025 20:01:20 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: HIvLZ1l0dXP+UnBw8glwAUrNKy6gGB+9i3txNPgBL5E=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:f8:b9:e5:a8:56:cc:d0:0d:58:c0:62:92:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Oct 8 20:01:20 2025 GMT
Not After : Oct 9 20:01:20 2025 GMT
Subject: CN=5439c92937092c41b6acb8e967a736449f703df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:3c:da:d9:d4:3c:7d:52:61:6e:2d:be:57:
7e:6a:72:92:90:0f:25:d9:a4:65:33:9f:b5:0c:84:
5d:07:f1:98:22:44:1c:99:88:dc:ad:d6:81:a1:ee:
be:c3:4e:5a:df:d7:14:75:20:0e:82:0c:4d:8d:a6:
33:c0:74:77:ea:4e:a9:cc:6e:b4:26:64:2a:2a:3d:
57:9f:25:c4:77:77:2e:7e:34:6c:55:07:e8:a0:27:
52:b1:76:17:24:93:63:cd:ac:94:81:12:b9:a7:0e:
f0:28:1b:6a:2f:87:df:0e:06:92:07:8c:73:53:5a:
df:fd:12:de:c5:2f:47:2e:1d:36:30:34:b7:03:cd:
2a:b2:70:4c:80:01:0c:31:9e:a4:44:98:20:fd:f4:
df:f9:1b:bd:3a:51:db:9b:10:43:e5:a0:70:67:b5:
16:56:86:da:a7:60:31:2d:e5:76:f1:aa:f2:d0:85:
33:85:01:4b:8b:79:81:60:9f:27:73:24:6f:fe:cd:
5e:bf:19:6f:c8:3c:03:aa:7d:33:12:29:7e:91:84:
29:c9:de:76:d0:81:74:1d:5d:68:7f:fa:d0:3d:0f:
fc:3b:50:6c:d5:eb:6d:42:92:7b:b5:d4:ac:3d:c1:
5d:5c:9e:c7:dd:cf:73:41:f5:59:2e:ce:e5:b8:1f:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:C9:29:37:09:2C:41:B6:AC:B8:E9:67:A7:36:44:9F:70:3D:F8
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:65:5b:95:aa:cb:59:b6:55:da:83:ed:2d:0d:29:99:b9:
1a:cc:00:58:5c:de:51:00:23:6a:37:31:1d:61:16:64:7b:76:
09:ac:b0:91:a4:1f:98:06:15:e5:9a:b4:23:42:6e:56:28:ca:
66:89:67:21:af:38:d1:49:4a:b2:6e:5d:a0:4a:5d:2e:2b:be:
82:84:9d:fb:7e:be:e4:76:73:11:be:af:ab:e5:14:f6:a6:dc:
1e:cb:c6:a4:2c:54:92:f2:4b:fa:97:e0:30:62:6e:5c:8b:f7:
7d:ec:c9:e6:87:14:e1:09:69:ab:b5:7f:17:bc:97:3e:e7:b8:
cd:2b:07:3b:71:df:37:13:d1:92:ff:6a:a8:fa:ef:44:97:3c:
49:88:3f:42:95:5c:49:0f:b1:a4:74:50:fb:aa:9a:9d:e8:72:
e1:11:6e:db:f9:21:07:62:9e:a0:3f:fd:55:59:8f:cd:3c:80:
f2:4c:29:53:b5:a4:5f:29:53:18:84:28:6b:8c:ba:ea:da:aa:
85:c9:af:c5:a7:e6:ca:e1:88:bc:42:fb:d6:96:dd:22:89:08:
68:44:6b:c9:94:0b:ad:ff:b2:ea:14:52:2b:43:aa:f0:95:56:
a1:1d:c8:57:93:0a:68:3a:13:27:25:b7:ec:b0:ec:8d:c5:16:
2a:bc:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:09:47 2025 by rpki-client