Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: v2r2OgDLQTnFc0Ai5SrltAZurcQnCL7Wi38pBvOKhG8=
Subject key identifier: B9:62:4A:8C:E0:65:45:81:83:5A:6E:C7:71:DB:1C:C6:12:B4:BB:FC
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019A239C0A0D901FA9D9FC99A261919FAF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0E8C
Signing time: Mon 27 Oct 2025 03:00:19 +0000
Manifest this update: Mon 27 Oct 2025 03:00:19 +0000
Manifest next update: Tue 28 Oct 2025 03:00:19 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: B5fTBQg8tmnhLz0bD0uY3DWKMFcb9yFRQfdDiPhVxzA=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:0a:0d:90:1f:a9:d9:fc:99:a2:61:91:9f:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Oct 27 03:00:19 2025 GMT
Not After : Oct 28 03:00:19 2025 GMT
Subject: CN=b9624a8ce0654581835a6ec771db1cc612b4bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:e9:ac:0d:2f:d4:39:86:55:29:04:13:a3:
f3:54:15:7a:44:ec:8f:d9:84:e0:26:47:03:63:30:
4f:c5:4d:5c:c3:dc:80:a0:ec:4e:c5:12:82:fd:75:
fd:3a:ce:25:5d:42:db:da:f6:fb:04:df:86:b5:ca:
fc:f2:60:d2:df:a1:17:4a:a0:26:26:e2:76:ef:cb:
f6:29:e1:27:13:d8:a3:a7:51:4d:4b:c2:27:1c:52:
c6:64:d7:9a:0a:43:b0:a9:a6:02:ed:39:3b:f9:b7:
fe:5b:85:c3:42:f1:a1:3e:57:8e:7e:7c:91:32:0c:
b8:39:33:4f:f1:50:00:d3:ff:81:74:7b:01:55:ff:
a4:a8:eb:98:10:f4:86:f5:9b:78:9e:8d:43:07:3a:
79:96:83:8e:d5:a4:38:e1:14:18:19:bf:ab:07:99:
02:6f:5f:f9:ac:42:c1:54:10:ab:73:55:e7:5f:56:
d3:29:31:cc:fc:6c:c2:94:f2:47:32:be:fc:c7:b3:
0d:92:b0:6f:c7:26:f5:67:4e:fb:d1:5a:16:90:5e:
a4:cf:9e:65:c8:64:fe:f2:cf:1a:1c:f6:32:b1:11:
46:bc:8c:1f:a3:31:91:69:83:12:e0:c1:cf:0c:4f:
65:b5:92:e6:d2:4d:f5:bf:54:4c:be:1b:87:b6:02:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:4A:8C:E0:65:45:81:83:5A:6E:C7:71:DB:1C:C6:12:B4:BB:FC
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6a:12:d5:d6:68:dd:b1:f2:d3:66:1b:3a:f5:5c:db:67:af:
df:df:0e:67:c0:fd:28:31:e4:b9:64:73:cd:94:47:b0:85:85:
a3:4d:bb:5a:8a:f4:44:68:c0:64:45:75:9a:0d:66:fc:8b:19:
a6:ce:15:f0:61:c1:8f:1f:fa:fd:f1:10:c0:ad:5a:b7:52:e8:
08:64:e4:39:d9:d8:71:ba:ae:68:d8:6e:7e:22:a2:1c:fd:03:
ce:66:8f:c7:61:32:ec:d0:2a:61:87:81:da:58:87:48:e7:02:
8e:ff:43:4c:76:99:31:dc:b6:e1:fb:e9:aa:c9:6c:01:e4:68:
1c:f6:35:9c:de:17:f7:af:f8:ad:77:6a:0d:a2:cc:e8:d7:36:
0d:b9:1f:54:ba:88:e8:69:2d:70:96:ca:fe:dd:b6:17:d7:f6:
cc:6b:d0:4a:62:75:e0:43:4a:8c:9f:a6:25:1f:01:4a:a2:3b:
dc:aa:db:11:5e:07:64:b9:9f:ed:b4:c1:88:d8:58:5e:59:24:
f0:2f:ef:49:14:df:58:85:1e:6b:a6:74:72:e9:1f:bc:5f:7f:
0d:1b:ed:33:76:e3:92:5e:45:42:75:93:20:4c:dc:e8:15:07:
2a:45:1b:de:e7:34:82:82:2d:c6:73:a8:5e:66:d2:99:a6:c4:
3b:ce:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:29 2025 by rpki-client