Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File: Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier: vxgKsmgmsWDM5VfecBBWiVye+tySKVdLhIBAqTiJfLQ=
Subject key identifier: C8:9F:E4:DA:9D:A1:63:DA:AF:98:8B:F3:AB:B8:AE:CC:F1:C3:6F:95
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 019A7338953156A264991BC7738E0D763F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number: 0FC8
Signing time: Tue 11 Nov 2025 14:01:19 +0000
Manifest this update: Tue 11 Nov 2025 14:01:19 +0000
Manifest next update: Wed 12 Nov 2025 14:01:19 +0000
Files and hashes: 1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: spKBrYKHWMZvtBOeJRlj2wL+L7KRFnONPiQhFYERrp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:95:31:56:a2:64:99:1b:c7:73:8e:0d:76:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Nov 11 14:01:19 2025 GMT
Not After : Nov 12 14:01:19 2025 GMT
Subject: CN=c89fe4da9da163daaf988bf3abb8aeccf1c36f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:b6:01:8a:48:87:70:c1:06:c0:6a:62:8c:
d0:90:47:ed:07:49:0f:64:d3:28:9e:ba:fb:09:2a:
54:ac:18:2c:a7:66:52:b9:6d:b9:fb:f3:dc:f3:54:
13:c4:77:5a:9b:d4:ef:c7:c1:4d:7d:d2:c2:a4:36:
5d:11:e7:32:9e:31:32:2f:7c:f3:e3:f8:91:9d:04:
af:3c:57:fd:22:51:07:0d:5c:18:f8:69:9b:c4:7c:
92:d9:3e:80:53:38:78:2c:b8:48:44:28:ab:d4:e3:
69:52:6c:b4:44:28:07:7d:85:ab:54:db:1d:5a:e1:
cd:e8:57:61:c7:34:4f:a0:7e:6d:66:89:65:fd:50:
4c:7b:71:ff:13:7a:c5:77:74:51:bd:2a:13:76:3a:
dd:6e:cd:82:da:51:9b:eb:07:ca:d4:9e:40:3a:2f:
ee:1e:0b:ca:23:ea:28:12:2a:d6:9a:1e:ec:a3:96:
61:cc:c4:cb:0a:70:c9:56:56:26:06:70:8f:b5:26:
57:05:99:06:c2:ff:2b:ec:31:ad:f9:21:7f:26:7e:
08:16:00:d1:1d:97:f4:75:28:fb:e6:30:0a:3a:fe:
fc:a0:02:ea:78:e9:89:72:e4:07:4a:27:e0:15:d4:
53:10:16:9d:c2:3a:9c:87:ae:ad:d4:0f:7e:d8:ca:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:E4:DA:9D:A1:63:DA:AF:98:8B:F3:AB:B8:AE:CC:F1:C3:6F:95
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fd:15:6e:9a:c7:90:c3:8c:90:bc:81:e0:1a:20:9e:ed:f4:
64:01:95:2b:ae:77:81:5b:7d:17:74:19:f7:19:d6:e3:d3:46:
78:b8:cc:ce:89:b1:14:89:22:4e:a0:b2:65:58:7d:be:bb:67:
7a:2d:fa:83:50:16:3d:07:a7:57:0b:af:7b:24:dc:04:b1:41:
e4:df:4b:b8:1f:1b:83:4a:01:6e:57:46:83:e0:eb:27:bd:83:
c4:51:de:23:f3:24:e9:c0:05:9c:ae:e0:45:e7:cc:b5:83:73:
92:4f:b5:a9:96:7e:fd:45:82:50:11:6f:af:c2:27:4a:a0:09:
c8:ab:6e:d0:a8:a2:2f:5c:73:0c:9b:d9:6a:a7:bb:b8:29:73:
43:59:86:fb:3f:4f:30:13:64:4c:75:5a:f8:0b:f8:93:96:d3:
4b:8a:7f:e8:74:25:0b:00:3f:0a:a9:ef:27:d1:25:c0:a2:1c:
8f:90:6e:ef:32:b6:c9:c1:b6:11:6b:a8:73:eb:38:2b:a8:52:
31:ea:a0:c5:a0:ca:c5:9a:41:43:a1:35:88:d0:72:66:2e:a9:
20:6f:f3:f8:35:eb:e0:66:c4:0e:a9:87:f7:0d:ac:d0:3f:83:
31:74:be:f4:01:62:0f:a1:af:d7:e0:35:61:ba:40:0f:eb:0f:
90:c0:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:53 2025 by rpki-client