Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: KFUrlll1h1tFimyGAQs2oJ9I/tfbOpFjVQ3zjuSvB1o=
Subject key identifier: FC:B6:4E:1A:21:EC:27:7B:FB:81:B6:58:E4:6E:43:89:F9:4D:0D:0E
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0199CD235794B177F55A33DD51B86C29F655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 16C8
Signing time: Fri 10 Oct 2025 08:01:09 +0000
Manifest this update: Fri 10 Oct 2025 08:01:09 +0000
Manifest next update: Sat 11 Oct 2025 08:01:09 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: VeK8ArHR2syhJz7u1bPKXvNn2EM7TALsofO/OK9aYu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:23:57:94:b1:77:f5:5a:33:dd:51:b8:6c:29:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Oct 10 08:01:09 2025 GMT
Not After : Oct 11 08:01:09 2025 GMT
Subject: CN=fcb64e1a21ec277bfb81b658e46e4389f94d0d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:66:8d:a5:c6:a2:89:65:c8:53:6d:1c:98:
0c:84:19:ef:21:5a:4f:f6:1e:18:d5:3a:f6:60:9c:
0b:f1:d2:53:11:ca:9b:41:46:59:36:11:e6:72:b4:
bb:3b:11:93:ea:8f:89:0f:92:70:12:f5:92:7d:08:
ab:b5:60:da:8b:53:e6:f9:b0:fd:e9:96:95:c8:3c:
3b:4e:44:a3:48:62:a3:18:80:50:35:e5:f5:01:df:
ef:c4:0a:f3:5d:92:00:32:37:35:02:6c:17:5f:29:
e2:b2:1a:c6:0a:26:2b:30:54:27:40:51:02:41:1f:
21:30:cf:bd:3c:f0:f0:8f:b9:c6:11:27:4d:e6:ba:
87:a1:85:d7:57:0e:ea:c8:4c:2c:27:c9:67:ac:c4:
1b:65:7d:61:38:88:66:ed:3c:7e:31:a5:87:3d:be:
bc:ef:99:c6:4e:19:d5:37:66:92:36:b5:60:3b:f5:
29:c9:8a:50:2b:fd:de:b7:a4:27:b9:af:42:6a:5b:
13:09:9e:18:a4:bd:4a:55:9c:a8:7b:60:78:6d:0d:
3c:9b:01:e7:07:b6:12:df:97:1a:fd:d6:79:30:06:
70:19:34:2c:e8:54:e2:38:e5:7b:ce:f1:71:60:e9:
f3:1f:f3:ea:38:e0:5b:26:8f:9b:ef:b5:9b:27:9e:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B6:4E:1A:21:EC:27:7B:FB:81:B6:58:E4:6E:43:89:F9:4D:0D:0E
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:12:2a:e5:39:5c:cf:40:0d:2a:66:62:c0:54:7a:2e:df:
20:ae:94:94:2a:dc:12:5f:5d:c7:1e:47:8f:da:1f:8b:89:1b:
2d:8c:b9:5c:32:af:e5:cf:e6:51:b8:fe:e3:0c:6c:87:05:b0:
ec:a5:a1:be:17:d9:06:ac:db:0f:74:f4:9f:a0:e9:91:f4:f0:
e9:b2:ea:28:df:e5:9e:b1:bf:a6:6b:7d:4f:bf:60:10:c3:f5:
b5:3e:a5:7f:8f:c0:89:e6:ca:ae:41:58:1e:d8:23:cd:36:16:
51:69:f7:cf:8e:5c:d9:10:43:bf:6e:dd:60:6b:6a:17:b7:0c:
5c:f0:2e:9f:49:89:0c:a1:f1:d5:da:b5:e9:4d:ba:26:f6:50:
a1:5e:22:ad:6c:f1:4d:e1:1a:1b:a7:0d:f9:00:64:4f:d9:f7:
b5:cd:15:77:15:59:3f:3e:58:8c:91:47:94:a2:84:e0:45:c7:
72:02:df:68:f4:2e:0a:1f:b9:dd:b3:23:ec:cb:77:b6:a4:69:
a5:89:33:86:f9:fa:62:b2:43:01:b9:ec:67:a2:08:30:53:0b:
f8:45:13:75:f8:b5:e7:dc:ba:de:51:90:c6:87:03:92:ef:5d:
51:8a:d5:e9:0b:0b:97:71:f1:6c:f8:7f:dd:0d:7a:e3:7d:9c:
25:ab:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 13:36:14 2025 by rpki-client