Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: X6HYFb8V7yw4t+g7/CyVWBX/j+xpMtc9KTq3qgkjfz0=
Subject key identifier: AB:CC:D8:01:78:91:15:B5:C0:1F:6A:FB:36:E4:D9:F3:23:D8:99:9D
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0199C569ACA1C245E03BFC0EB198F86852C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 043B
Signing time: Wed 08 Oct 2025 20:01:00 +0000
Manifest this update: Wed 08 Oct 2025 20:01:00 +0000
Manifest next update: Thu 09 Oct 2025 20:01:00 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: AFgnj63v3I2QZqidhZ7JgGKsOCa4Ra2V8r5mSJFLCY4=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:ac:a1:c2:45:e0:3b:fc:0e:b1:98:f8:68:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Oct 8 20:01:00 2025 GMT
Not After : Oct 9 20:01:00 2025 GMT
Subject: CN=abccd801789115b5c01f6afb36e4d9f323d8999d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:65:69:a3:05:4b:5b:e7:eb:dc:b9:0c:62:
bc:8c:21:3c:46:fb:1c:e4:9d:52:94:d1:55:19:ca:
c4:e1:11:2e:bb:f9:26:70:d6:54:ce:e5:b9:6e:81:
89:60:4f:e7:14:12:f6:b5:a6:24:1b:53:db:19:c9:
4d:49:bf:cd:8e:bc:bf:0e:f9:6a:ea:8e:59:d8:76:
ff:a9:e2:50:fc:1e:e5:75:90:fc:a7:12:f7:e6:7b:
73:cd:f7:3a:67:f7:dc:ce:dd:fe:de:42:27:cc:57:
84:d5:bf:e3:eb:81:97:54:5c:41:f6:2d:f5:64:ea:
24:a6:7d:e6:a3:9b:3e:1b:b3:ce:f6:61:c0:41:73:
dd:2e:a0:41:4f:45:39:41:61:c8:2e:9a:ff:ca:42:
4e:e9:fc:30:eb:25:41:0d:66:9c:f8:20:39:ea:60:
f8:1c:7e:f5:12:4c:75:08:5b:6d:cf:91:4e:51:bd:
43:ae:03:27:3c:fd:40:07:e1:9c:b3:7b:fc:76:10:
db:bc:0e:f5:74:d7:09:0b:a8:6d:43:9c:33:39:94:
b1:14:ea:d8:da:71:45:ff:93:22:2e:15:75:03:cb:
cf:92:e5:dd:78:47:5e:fe:25:8b:03:92:42:36:5a:
39:69:91:b6:f3:5d:37:41:93:22:35:f6:ff:7b:66:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:D8:01:78:91:15:B5:C0:1F:6A:FB:36:E4:D9:F3:23:D8:99:9D
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:6e:ba:52:0a:d7:0d:72:7e:05:64:cf:dd:ba:6a:4d:7e:
46:c6:d4:5a:64:18:ec:0b:74:48:8e:4f:5b:36:25:f8:9d:96:
44:af:6f:e9:d8:77:75:33:14:a2:08:24:de:09:38:53:a3:c4:
b9:a3:f2:3b:df:65:9c:46:df:e9:9f:72:fe:43:fe:1c:93:9b:
be:63:74:84:60:4d:ce:5a:75:09:73:93:a9:d3:9e:78:60:71:
8d:71:01:19:2d:2c:16:64:86:e8:84:c5:a6:05:c6:96:e4:6a:
fc:9e:ac:26:78:d0:c9:2f:51:d2:2a:0e:00:29:af:c2:57:52:
f8:cd:90:2f:99:85:1d:99:45:62:5c:60:c2:08:71:52:f2:07:
fc:e2:c1:7f:88:f9:f2:71:0e:8e:1a:f6:b3:e4:92:90:2f:1d:
4f:b7:25:ba:91:93:1f:2a:5f:65:21:db:55:b4:84:72:36:38:
a0:e7:2d:56:58:31:77:24:56:40:cc:1d:1b:ae:3d:d9:79:54:
43:35:8c:ba:bf:88:dd:09:f0:ad:04:94:07:c5:8b:74:e0:42:
79:3d:5b:ff:55:1f:cb:29:d6:fc:13:6a:89:28:d3:aa:5b:b3:
f8:80:04:dc:c3:46:42:11:3e:bb:cd:c2:f1:bd:66:25:4b:f5:
66:09:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:46 2025 by rpki-client