Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: k4xEhNyaiPafWsQNXDVWo/oladRBcTPL+ALq1T/2ido=
Subject key identifier: E5:94:07:E1:B9:03:57:FF:64:E5:D2:9D:EA:C5:53:84:FE:8D:47:60
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 0199FBEBC5FAD32981AA5D2C22C9E28F99C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0D21
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: jCtVZYYDtK2cUagUNaf/3pecRhcJRrNm8UlxDLsR7jM=)
2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c5:fa:d3:29:81:aa:5d:2c:22:c9:e2:8f:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=e59407e1b90357ff64e5d29deac55384fe8d4760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:7d:5a:68:5d:89:ce:37:b5:96:a1:9e:5e:
23:9b:dd:46:ae:5d:88:f9:71:3a:e8:ac:d8:df:6d:
a8:90:a7:64:85:68:44:07:34:e3:08:6e:91:eb:60:
09:a1:4f:de:82:9f:32:82:8b:45:e7:16:da:0e:79:
a0:b8:49:e3:94:da:9b:4e:c8:82:bd:f9:50:74:a0:
03:2c:52:5a:2f:c2:7d:c0:f5:bb:14:f5:00:38:a4:
29:38:57:0b:0e:9e:f0:1b:3d:59:09:6b:23:b7:10:
09:d3:91:6a:df:85:30:29:39:74:a4:dd:99:b0:80:
1e:5d:cd:db:83:cd:65:b6:51:f4:5c:85:6a:ba:ba:
7e:54:a1:21:db:c2:20:ea:c9:88:e2:3b:b8:57:be:
ba:94:2d:c8:ae:aa:72:24:ef:33:05:ff:98:94:72:
3c:b5:86:6e:b2:e4:b3:b4:70:45:34:dd:0b:ea:59:
f3:70:00:30:a6:67:5d:72:03:cb:d9:f7:94:52:b8:
18:73:db:cd:6f:9f:05:22:e4:1b:15:dd:90:91:ca:
c8:ae:44:f0:c1:15:e2:f0:8d:79:6f:5f:bd:a5:05:
25:b7:e3:49:25:05:95:a0:28:6b:be:2d:e1:a8:0b:
8f:da:28:70:5e:f7:9d:a2:ca:09:9c:67:f9:58:f5:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:07:E1:B9:03:57:FF:64:E5:D2:9D:EA:C5:53:84:FE:8D:47:60
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:aa:75:f8:8b:27:98:29:2c:3d:fa:36:cf:94:94:c6:56:6c:
ae:d3:35:62:37:1c:90:2d:47:e0:84:d3:b6:39:2e:86:8c:37:
73:9c:6e:00:16:d3:28:89:db:64:d8:91:96:cb:e0:f3:5c:e8:
fb:5e:a8:b8:22:e9:24:9a:3b:9e:cd:09:12:94:be:84:0b:e8:
bc:b4:bc:c6:9b:45:ac:bf:6b:4e:4c:30:aa:41:00:46:02:a7:
29:7b:75:a7:57:08:92:37:12:fd:da:36:e3:77:84:a5:99:5f:
75:0e:4c:93:3a:1a:30:37:a5:c6:c7:2a:e7:a9:dd:ed:c4:01:
84:6a:7d:74:14:66:18:d5:2b:90:c9:9f:98:88:55:9e:1d:7b:
c1:55:7b:04:d0:29:4b:1d:eb:83:2a:23:b5:b9:7d:58:9d:aa:
fb:ac:16:d0:64:83:64:76:b7:df:d9:be:cc:9f:2e:8c:92:5b:
16:ac:e2:f9:f7:cb:0a:5a:34:30:11:4a:b3:d8:3e:23:1f:e5:
19:15:d9:06:f9:b6:b3:60:28:4c:93:3b:d8:98:99:2c:bc:be:
dd:12:47:47:f4:5e:70:f3:9a:30:74:96:4e:67:88:c3:e5:d8:
dd:9a:16:30:1c:23:11:b2:a6:c4:14:30:9b:1a:37:5a:97:37:
d4:79:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:07 2025 by rpki-client