Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: g6RVgsnws4Vp4TQ3dm/cNs+9UxJpP7X253UtVOCsGp4=
Subject key identifier: 57:B9:4D:4F:B1:72:4B:0F:73:5C:D6:60:09:3D:31:8B:05:3E:95:A4
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019A21E4AA0EB2945570B635F8D1FC99BEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0CA4
Signing time: Sun 26 Oct 2025 19:00:24 +0000
Manifest this update: Sun 26 Oct 2025 19:00:24 +0000
Manifest next update: Mon 27 Oct 2025 19:00:24 +0000
Files and hashes: 1: 2HsIGyT4rIJuu6UrqRcR2fc9b3I.roa (hash: hUQqgn+fKEmkw/9ErWQL/8TgPXVZMyjAW7UPwj4OttA=)
2: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: uTxdGvprSbM5ICleQJCtwr6XYWT1ywenQpqtz+SRwQ4=)
3: dz5PrO-ksQipuN7JJpM04omvh6c.roa (hash: 81uIRfVVY3c1peJ8bScAsHXQKW9arfKTdSaUvSixwrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:aa:0e:b2:94:55:70:b6:35:f8:d1:fc:99:be:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Oct 26 19:00:24 2025 GMT
Not After : Oct 27 19:00:24 2025 GMT
Subject: CN=57b94d4fb1724b0f735cd660093d318b053e95a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:09:06:1e:ff:56:cd:f4:46:61:87:aa:db:
8c:96:89:3f:9c:65:17:fa:19:65:f2:7c:d2:ce:76:
86:20:a2:97:d0:f1:2f:3f:89:46:3d:ed:3a:ff:8a:
c8:d3:3a:34:36:3b:84:00:14:dc:97:29:62:c1:9f:
74:7f:99:b1:56:0e:6f:80:c2:ad:c1:11:64:2c:ab:
fb:61:f2:43:3b:24:c5:09:ef:71:7e:7e:66:e1:94:
43:3c:47:fe:4c:71:32:18:87:86:6e:38:9d:89:2d:
fa:d4:89:7a:b5:25:e6:66:b5:82:c4:2d:10:31:4e:
77:93:bb:38:ba:e2:e3:a2:b9:62:ce:01:03:89:17:
a9:f5:60:04:70:2a:7f:6a:db:6a:30:89:b2:c4:1d:
50:40:c3:35:bd:7d:3c:6e:4c:44:4b:b8:88:3c:17:
21:24:9e:b0:1a:15:d4:ac:98:28:40:42:73:88:47:
b3:32:c8:7a:e1:84:77:55:f6:af:88:83:fd:71:52:
84:20:dc:2d:5c:7f:05:ab:c3:2f:3b:8f:18:73:e3:
0a:0f:6e:70:a3:9d:f9:33:49:4d:3c:59:86:8e:65:
b5:43:0e:cb:44:8b:40:37:17:d1:57:82:bc:2e:a3:
92:b8:a7:f1:14:31:d8:7d:a8:8c:f3:d8:c1:58:27:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:4D:4F:B1:72:4B:0F:73:5C:D6:60:09:3D:31:8B:05:3E:95:A4
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:4f:b1:66:1d:1f:3f:0d:32:76:f8:ed:65:3e:5b:a0:83:
9f:cc:40:8b:47:fe:e3:53:82:cd:79:a7:41:bc:ad:66:17:73:
6c:66:5e:f5:9b:c5:1e:ee:6a:aa:e9:c5:5f:3f:92:12:17:59:
94:2b:d5:65:c6:41:c2:ae:ca:b3:43:33:f2:fd:fb:5a:09:42:
ea:a9:b5:89:87:9c:e6:ee:c4:16:83:ad:69:c4:a0:df:58:09:
23:49:77:67:ac:0c:6d:a4:9d:1e:40:8b:6f:6b:7c:e6:be:12:
c6:6e:4e:f7:e6:fd:8d:6f:3a:ca:f1:4e:be:a2:9a:2e:cc:8b:
98:82:df:2d:e5:72:fd:4d:c3:6c:fb:1a:5c:52:61:6b:0c:c6:
de:1e:7b:c6:54:69:86:e0:9b:76:4c:6f:5f:f1:7e:32:ed:d8:
58:9e:97:18:05:04:cd:de:ab:de:00:5d:09:43:6f:f0:dc:78:
ce:4f:a3:67:ae:2f:cd:b5:6d:c2:1a:de:69:3e:9b:02:8a:cd:
a8:cd:57:fc:99:ee:68:92:ce:e8:20:2c:c1:71:0f:aa:cb:34:
1a:ca:2d:38:00:61:54:90:41:7c:b5:d6:76:d2:e2:6e:80:10:
96:fc:70:e4:40:1f:2b:da:25:7e:b9:86:11:00:4c:9a:2a:5d:
67:39:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:23 2025 by rpki-client