Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: SKWsbgYWWO2BKu6zxj+EXzFzO6yoJhQKEu3tRaGXoqc=
Subject key identifier: 23:C9:20:40:41:7C:67:86:C5:94:D2:C4:41:8E:55:6C:F8:91:57:49
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 019A72940A0C7D3590A148285C146C0BD182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 0A05
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: qq4mDX1nZ78PrB2jMiLVheMoa+ju8TMkpIVSxQxWH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0a:0c:7d:35:90:a1:48:28:5c:14:6c:0b:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=23c92040417c6786c594d2c4418e556cf8915749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:3e:6e:77:fd:3a:22:bb:db:d7:d7:93:37:
f6:84:0e:26:43:8e:2e:43:0f:e9:16:8d:32:8c:fb:
8d:da:5f:29:4d:ef:c9:5b:03:10:6c:84:af:91:eb:
65:0f:db:72:cb:75:c4:66:b1:41:e4:1f:93:45:b1:
a6:17:0b:a5:fe:a2:39:02:7c:95:07:e2:c8:c3:de:
18:b9:6e:98:18:9b:12:4f:5d:fb:11:04:2a:41:44:
23:3d:0c:4f:6f:6f:67:b1:7d:9c:66:74:14:6b:20:
51:e9:44:47:e5:b2:d5:5f:a1:5c:d8:4d:7b:15:aa:
a1:65:0b:1f:7e:4c:fc:ff:92:a0:12:4d:cb:50:78:
a4:1a:7b:98:95:e3:7b:ad:82:84:4c:fb:7d:03:1b:
6a:da:8b:d2:fc:1b:06:fa:43:24:e8:36:0a:fa:27:
1b:d5:cd:8b:60:b6:ee:17:a8:b4:f2:03:83:67:72:
7d:f5:35:55:85:69:ff:ef:bb:e9:f4:3c:db:4c:f4:
45:6e:65:bf:f4:d3:3a:32:d8:c5:72:f9:8a:87:bd:
ca:61:97:34:35:23:fa:57:e6:bb:07:7b:5b:97:c7:
6a:26:4d:4c:97:0c:0f:57:7d:2b:2b:12:4b:7a:af:
6f:b0:2f:f2:4f:9d:d4:bc:b9:8f:e7:75:65:e1:e7:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:20:40:41:7C:67:86:C5:94:D2:C4:41:8E:55:6C:F8:91:57:49
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:84:b7:c4:8b:a2:7b:e1:0e:48:c6:9d:00:84:5f:2b:eb:
a3:2d:b5:fb:ce:75:09:0f:db:60:59:2b:44:e9:9d:23:4d:98:
da:39:70:8a:cc:80:2c:4a:21:4a:79:2f:67:7e:78:0b:96:f1:
b4:4c:eb:e2:83:31:ef:65:9a:de:fe:23:52:ad:60:df:f0:cd:
9d:2d:cd:40:a6:39:1f:dd:7b:46:b6:be:79:97:86:7c:0e:27:
8c:ad:da:7a:ed:02:d5:3f:cc:d2:53:c6:6c:62:e4:e0:b1:16:
30:75:cd:e0:f9:0f:9b:69:18:9c:b0:ee:db:14:a8:0b:a1:05:
cd:78:4d:ef:a0:25:e6:93:b9:d6:a5:eb:6e:8b:58:ef:e5:3e:
3c:13:c4:21:48:20:7a:f3:39:38:5b:2c:1a:ab:d3:f9:4d:f5:
2b:bb:e4:e2:b9:b3:22:85:63:21:b1:00:43:30:e5:56:39:21:
f7:ff:60:55:6f:2d:0b:67:51:06:fa:6b:8a:87:aa:17:a4:28:
3b:82:59:d0:46:bc:e0:e8:52:2d:60:a5:4a:2c:e6:b5:de:29:
b7:2a:82:a8:a0:2b:0e:30:af:29:61:f1:f5:7d:f3:ff:33:e3:
0d:b7:06:b9:5e:b9:72:04:f0:ed:d9:3b:05:dd:fd:bf:7d:c9:
69:66:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:00 2025 by rpki-client