Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: avIsed53m4UnYyyRQ2n+NNtyDD3QlSvxeUhhodtN03o=
Subject key identifier: FB:1B:32:DB:4A:1C:F1:E4:3C:DE:D6:A6:F2:F9:A8:4D:6D:81:F9:02
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019A71B8F7F584EAAE0181F5B2117A8B3D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 086B
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: 1AGt6vAj9ZNv2w7Fp5tJobLB8aI.roa (hash: GbnSbQEBgHsaOZrngwqdPSv9qkJB1d7PRyKBT0jDdQQ=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: cDVSU1vhbg0Zhrv6Y+lVGyybi5DAZkksTex7kbHfTHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:f5:84:ea:ae:01:81:f5:b2:11:7a:8b:3d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=fb1b32db4a1cf1e43cded6a6f2f9a84d6d81f902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:e8:df:e1:81:07:6c:ff:03:16:ca:78:8e:
71:44:33:47:09:12:73:66:77:ee:01:9e:4a:4b:25:
c2:50:cb:2c:af:fe:fa:83:7c:cc:e2:88:da:dd:89:
f7:ca:6f:62:f9:b3:61:e1:d3:63:4c:43:8b:b1:c6:
71:ad:35:ae:9a:62:3e:3a:fe:da:eb:65:71:e0:73:
a5:e2:65:67:6e:3b:77:6e:03:63:16:fd:29:31:d6:
7e:fe:32:0b:30:46:15:5f:0e:9e:6f:b3:ad:b0:6d:
56:cf:b7:f5:15:fd:14:c8:a0:9d:59:ac:00:9b:67:
f2:95:1e:9d:0f:e3:66:8a:3f:4b:92:1a:b9:41:82:
a6:ec:02:0a:ee:09:51:fd:0e:b7:42:a7:fc:53:3f:
92:1d:cd:c6:34:f1:65:d1:33:02:59:e9:bd:2d:92:
a9:4d:79:9d:d3:bc:79:c5:f8:ad:a4:e4:99:8a:6b:
68:29:1b:64:49:ba:b4:75:b8:32:5f:b1:82:7d:8e:
54:94:4f:b9:15:57:56:20:81:73:b8:c5:13:f5:89:
e5:0b:36:9a:9e:8a:32:25:66:fb:44:f3:5b:0e:f3:
dd:54:3a:9c:dc:81:9d:90:8e:be:64:67:43:56:cd:
96:da:28:8e:f2:5d:d3:29:77:1f:96:99:30:37:0f:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:32:DB:4A:1C:F1:E4:3C:DE:D6:A6:F2:F9:A8:4D:6D:81:F9:02
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d8:56:b8:a8:ec:ec:16:48:5c:2b:03:6c:38:13:d9:5e:da:
9f:60:48:72:46:8a:5a:4e:cf:20:70:d8:07:26:f0:1b:e5:5c:
8f:d6:64:bc:be:90:20:bf:db:95:be:92:a8:db:98:8a:55:37:
e0:4c:04:8e:b1:69:5e:8a:03:27:72:01:42:69:e3:d6:8e:b5:
1d:ae:24:8d:ff:71:14:4e:48:9e:2d:64:2c:65:45:5a:9e:54:
74:a2:be:26:99:e2:ba:55:bf:67:04:5b:9b:d0:7c:89:c6:9b:
97:5d:a2:ca:e5:5b:eb:41:4e:95:9f:24:c3:48:53:f4:e9:7f:
18:fb:9c:23:fb:f2:b8:a7:c8:4f:3d:61:de:eb:64:4f:24:67:
1d:77:99:41:8e:28:8e:be:e8:09:54:ee:b1:05:8e:52:81:8f:
e6:8b:58:28:df:b9:1f:7a:46:9d:9a:13:26:c0:29:2e:23:e4:
a0:6b:fc:38:cd:38:36:b3:ea:bf:5b:02:d8:be:69:fb:15:78:
f4:7d:06:41:c1:2a:a2:13:f2:56:8e:eb:2f:0c:fd:4d:bd:c1:
aa:fc:5f:90:ea:9f:9e:3b:b0:3c:eb:da:26:06:a7:95:e8:15:
d9:18:db:b6:3c:ef:36:07:10:2b:41:3b:be:d8:ad:1e:d9:c5:
5c:ac:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client