Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: sA7IveAatIHl5NTyBVJye90aaJgp9+bWuHhYIwC9/Eg=
Subject key identifier: 39:A0:AC:5C:69:1F:48:6A:F7:1D:8D:6C:60:92:BE:68:EE:04:BF:5D
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 0199FBB365EA2E268160C98C8E8D709B90B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 1629
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: idD1btoWg7LwlNt+nOCambjfrICwxDWRWkVBxjlP61c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:65:ea:2e:26:81:60:c9:8c:8e:8d:70:9b:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=39a0ac5c691f486af71d8d6c6092be68ee04bf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:32:ba:9f:14:7a:3d:f4:df:1e:3f:35:3f:
7d:40:2d:5f:23:cf:7e:fa:31:91:a4:cc:b7:23:dd:
15:0b:cd:7a:d6:e2:80:04:36:8e:26:13:72:26:06:
3b:fb:b7:5c:fb:f5:83:d7:1e:30:d0:58:7b:09:47:
06:fb:a6:4d:4a:92:d6:24:2b:c7:02:62:7e:75:93:
a7:5c:db:20:08:af:ef:8d:84:b2:29:c6:e6:44:64:
c7:48:84:4a:79:bb:73:f7:55:d0:8a:09:1c:28:c2:
77:3d:80:0e:b5:2e:d9:e5:07:cd:b2:b9:a8:01:b4:
f6:ef:3c:30:ab:f9:3d:fc:1b:ed:2a:92:0f:59:6f:
6f:a2:a4:4a:ec:10:57:f5:37:90:32:6c:de:8b:af:
ca:4e:fc:5c:fa:4f:ef:df:42:43:92:6f:6a:cc:fc:
8e:6b:96:48:6a:8d:53:c4:0f:d2:4c:7c:2c:94:65:
04:18:c5:09:a6:10:c1:e9:e4:f6:bf:e1:a8:99:63:
79:12:31:cf:60:b1:f5:ca:98:bb:12:1f:49:76:5c:
bc:25:c0:2b:aa:17:f1:cb:51:ca:6a:e8:13:a1:c6:
3c:25:5f:b1:5c:51:70:04:99:c3:ec:02:3c:78:e4:
6d:96:79:22:f8:ee:e8:c3:d1:8e:6f:3f:f2:93:bb:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:AC:5C:69:1F:48:6A:F7:1D:8D:6C:60:92:BE:68:EE:04:BF:5D
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:8f:4a:a0:ce:6e:dc:15:f8:6a:d9:46:9c:df:d9:8f:53:
d8:0c:77:d1:06:86:2f:ea:96:32:61:9f:3f:56:9c:c5:00:94:
a4:9c:4a:fc:1d:5a:f1:f2:58:97:c9:04:4e:02:2b:29:57:f2:
03:83:cb:47:58:99:56:38:d6:0c:36:91:0d:7f:15:42:89:6b:
7a:fc:05:02:90:e3:4d:cf:92:ba:d8:ad:5f:c2:e4:60:96:aa:
b7:a7:fb:62:ab:52:e0:24:64:26:8e:55:bc:9b:86:b3:b0:50:
8d:54:79:0a:96:1b:16:63:c3:35:07:5f:44:6d:26:45:e5:51:
ad:3e:14:4f:b8:30:79:1a:04:72:84:f8:ec:f0:65:e8:26:da:
1a:4c:52:3c:9b:20:51:fc:cd:be:0e:eb:b7:62:31:61:57:62:
f0:b4:74:e1:ac:e5:bc:c7:1a:ec:0d:aa:b5:59:06:e2:ea:d0:
f2:40:97:b1:e1:13:a8:7a:7b:db:85:88:d7:52:59:f2:d4:5a:
4e:5b:ea:79:49:23:13:53:22:ce:08:e6:66:7b:15:90:8b:34:
7f:0f:e2:7c:85:28:45:39:40:8b:18:ec:19:e2:c8:68:fc:7d:
5a:39:3d:63:ce:67:0a:c8:ce:b7:d2:8b:39:21:2c:1b:19:02:
5f:cc:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:14 2025 by rpki-client