Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: TpLDs69Qa2usNN/OEO38Jzhrw6j1e2RTKpvLJ+IeebE=
Subject key identifier: FC:0B:C6:7F:6D:3E:F9:4B:2F:05:95:FB:4A:4F:C4:F4:64:7F:69:F6
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 019A251CD3D8BE33D0EC4009904FA6C62750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 10:00:37 +0000
Manifest this update: Mon 27 Oct 2025 10:00:37 +0000
Manifest next update: Tue 28 Oct 2025 10:00:37 +0000
Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: BcD8s7ddMP3yjUFFaFB4o1OgWCg+bnVSx5j/DbGj2Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:d3:d8:be:33:d0:ec:40:09:90:4f:a6:c6:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Oct 27 10:00:37 2025 GMT
Not After : Oct 28 10:00:37 2025 GMT
Subject: CN=fc0bc67f6d3ef94b2f0595fb4a4fc4f4647f69f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:8e:3a:6f:46:a8:2c:cc:ec:62:0c:47:41:
34:62:e2:06:08:ad:00:b8:63:68:03:8e:fa:30:fd:
93:6f:3f:cc:ae:7f:fc:a1:9b:7b:3c:ad:ca:1b:18:
f8:c1:4e:82:c3:f7:c5:2c:bc:f9:14:fe:41:25:41:
c5:31:92:bf:d3:84:1d:fb:45:c0:9d:2b:0a:2f:fd:
ec:18:cd:27:f7:64:f2:cf:00:a5:43:6b:62:bf:10:
fc:bd:e2:3c:eb:3c:86:7b:46:76:98:3e:b7:0d:03:
42:f6:89:5e:72:e5:3d:8a:5d:9f:c0:a5:ef:84:a5:
7d:66:88:02:ec:c7:5b:07:22:d3:aa:5f:44:9d:eb:
bf:c0:0f:bd:10:10:11:0a:04:37:1c:e6:2a:3e:bb:
28:bb:3d:a3:8d:a6:b7:82:37:bf:12:27:2e:21:2f:
a0:d4:51:21:a7:f8:bf:e6:60:09:dd:72:12:f4:4a:
ae:2a:00:5a:aa:ee:f0:7e:09:58:18:79:d2:ef:4a:
55:5a:6f:ba:41:bc:6a:11:02:64:f9:d7:01:72:1a:
a3:1e:44:26:d2:0f:37:ac:db:16:02:20:35:fe:53:
ed:db:a4:68:68:b9:33:bd:fa:90:42:10:75:8c:ea:
fd:1d:8a:ae:7d:60:a1:ff:a5:3e:8a:d0:38:b1:ed:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:C6:7F:6D:3E:F9:4B:2F:05:95:FB:4A:4F:C4:F4:64:7F:69:F6
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:1e:19:80:4f:39:eb:a9:5d:1a:da:22:81:4e:29:6d:84:
00:c2:7e:d3:50:db:7e:3c:46:37:c3:25:db:bf:f7:e2:b7:e7:
0e:89:da:22:b6:a5:08:c1:90:08:7e:6c:fd:ca:b2:6c:ed:84:
1a:7c:f4:bf:00:d5:9c:63:cd:f9:bc:72:68:79:e6:f0:56:66:
b9:47:d4:70:57:26:46:12:28:d8:29:e3:9c:12:1b:f4:d5:6f:
3b:b7:bf:d2:6f:ae:9f:80:09:6e:cb:f7:4a:71:a5:5f:6e:d5:
2f:58:42:3a:fa:ec:68:53:5b:34:9b:ab:7c:da:22:84:da:1a:
8d:ba:75:8d:ba:96:94:88:24:63:de:20:3e:41:3b:79:d4:5e:
11:84:52:14:ab:c2:b4:d8:68:f3:15:f0:38:b2:f7:3b:8f:8a:
ba:0f:8a:93:4d:bf:9a:62:e7:b3:0f:d9:d5:c0:46:1f:14:24:
48:04:35:12:c6:a4:ab:36:e7:91:53:0b:3b:26:13:e9:e9:35:
79:cc:82:7f:6e:7d:c7:77:9d:13:9e:03:37:4d:47:98:77:bc:
ce:8e:12:41:74:e3:50:12:c2:d8:77:37:1e:f9:e0:d2:16:57:
8f:1b:a0:ab:d1:f4:df:72:1c:3e:c5:6a:ce:bf:5f:1e:20:23:
0e:67:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:46:22 2025 by rpki-client