
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: xOyy1zZGEz9OKimVYCM5unZdk0IYS4ETCptuKULVujw=
Subject key identifier: 02:8B:5A:BB:B1:3D:1B:ED:5F:5C:AD:AC:C4:3A:79:86:66:5F:45:A5
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 0199FBEC19D22459E20F442EA1E104C881F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 0348
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: +l1GIYzjSntMDYf42JtTs34bNEdiMG9YUjtUuvjDS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:19:d2:24:59:e2:0f:44:2e:a1:e1:04:c8:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=028b5abbb13d1bed5f5cadacc43a7986665f45a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:e9:7d:b1:e0:04:e6:1e:db:a6:bb:93:9c:
05:ff:f5:c4:fc:91:8f:2f:ff:92:03:b2:8a:7b:fd:
4a:e1:60:c1:c4:9b:97:5d:ab:4c:03:4e:6e:ee:4c:
2c:f1:72:88:00:68:fc:ee:3c:f2:98:60:08:2f:8b:
b6:5c:8c:75:9c:2f:80:94:14:d9:ae:e5:b0:88:25:
6e:39:a8:45:e0:da:13:a3:f1:3f:b6:30:1c:50:1c:
6e:e8:27:ee:2a:08:1b:a9:c0:58:8a:0a:9b:fb:1e:
73:df:b3:fa:ff:8e:35:6e:38:1e:43:ea:26:8f:57:
a6:f7:c8:b6:16:f1:b3:6c:65:e7:f9:b9:af:40:50:
6d:ee:a4:8c:d5:a8:c6:70:bc:fb:13:43:56:6b:91:
a4:d3:1c:5c:7f:4a:aa:89:69:94:de:9c:73:f1:5c:
45:9d:5a:2f:03:5b:88:03:5e:db:2b:3e:ee:41:80:
c2:dd:4c:1f:4e:b4:e0:f4:00:be:0e:b6:42:d0:7f:
63:ee:b5:68:69:45:52:0d:e4:66:51:e2:aa:ae:e4:
43:04:b7:57:d5:c5:6a:65:80:e6:ab:28:a7:c6:b0:
d4:ef:8f:9c:32:1b:6b:70:d0:85:65:2c:af:79:86:
07:c3:4f:f9:87:d3:86:66:eb:4a:53:c3:c4:c1:70:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:5A:BB:B1:3D:1B:ED:5F:5C:AD:AC:C4:3A:79:86:66:5F:45:A5
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6c:f9:95:df:c4:c5:f3:44:d6:7b:91:10:6b:95:20:99:19:
ba:b3:96:05:08:ca:29:92:83:4d:cb:bb:ef:72:a4:ba:e0:09:
6e:f4:dd:bc:2e:96:e2:5b:50:10:17:3f:f1:06:10:cf:1d:56:
00:4d:48:9f:f0:07:1c:81:a8:77:13:bb:63:3a:df:c6:a0:0f:
6f:0c:38:42:41:0b:b8:14:cb:f1:80:40:3e:35:a8:98:c5:02:
9b:0e:df:56:11:c8:e3:d9:e5:f7:8a:e5:7f:5d:be:88:ad:bb:
39:83:6c:3d:01:36:96:13:48:97:f8:50:a6:2f:f6:b8:79:27:
44:ae:c4:7f:03:37:9f:e2:3f:eb:f5:0e:f4:3b:cf:b5:0c:7f:
e5:72:60:7b:3d:7c:80:23:7a:cf:67:9f:be:ca:62:8c:7e:c9:
7a:e5:90:3d:2b:7b:5d:af:74:1f:71:54:c9:32:48:ce:e3:a9:
a9:84:2f:61:94:90:6c:f3:f3:d0:98:a9:05:11:46:35:a7:ca:
0d:4e:ff:ce:ff:5d:a8:88:b4:7d:e4:6e:10:68:18:b8:3a:79:
67:28:b1:4d:eb:88:6a:72:4d:82:12:3b:60:cb:8d:ca:c5:ba:
8c:68:a4:70:41:ea:5c:68:7f:2b:a9:9e:5e:64:02:e7:b6:94:
8e:5a:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:56 2025 by rpki-client