Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: TIQD9hUgjhvBWROHTG98TtHo9LtHBeR0GUXoz0hxhGE=
Subject key identifier: E1:35:75:CD:44:65:8A:5B:E6:C7:03:FF:27:6E:80:09:D4:96:06:68
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 0199FB7CDECEDC1699112B0E613DD517AAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0FE3
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: bk6RMlMgR5yh/ZDijOIiHZ3bHd/s8Mzx/tMwbztB7Jo=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:ce:dc:16:99:11:2b:0e:61:3d:d5:17:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=e13575cd44658a5be6c703ff276e8009d4960668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:65:f2:5b:62:4f:d5:2a:8f:78:83:1c:d1:
17:b6:33:06:8b:de:4f:77:e6:0e:69:94:38:11:8d:
5b:41:ba:9f:e3:94:08:53:ee:8f:73:d9:97:33:94:
22:83:75:4b:8f:f6:46:77:f0:17:66:28:d8:24:74:
cb:2f:77:6e:0d:4d:c5:46:ec:1d:27:ea:ec:c3:25:
94:9a:67:25:c4:00:33:b0:b2:a8:81:f2:a6:6b:04:
e4:dc:94:57:5b:4b:40:b2:96:0c:09:a2:2e:13:f8:
a2:c5:7e:5a:ad:d4:04:d3:3e:a9:ea:09:35:b8:b1:
e6:e7:e2:d9:02:e1:1c:93:e9:e2:0b:63:91:2b:87:
55:5e:22:13:b3:32:5b:14:ac:c3:cb:ee:9e:30:57:
41:3d:d5:0a:28:b7:a6:cf:45:14:b5:c4:85:a8:16:
43:18:9d:c1:ff:47:0b:04:e1:a8:82:a3:45:96:ef:
7a:2a:00:a6:24:68:cf:e4:31:65:02:43:12:0f:2f:
08:fc:06:c4:ce:01:d9:28:6f:8e:25:a1:c1:79:bd:
ca:52:2e:f6:17:29:86:76:80:a0:6e:f9:a6:66:0e:
b5:5c:b0:39:e3:be:ab:e4:f7:fb:61:58:88:68:60:
b9:9a:82:66:58:d9:71:95:3a:f3:a3:da:6b:6e:bf:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:75:CD:44:65:8A:5B:E6:C7:03:FF:27:6E:80:09:D4:96:06:68
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:85:fb:5f:86:f9:37:9b:e0:60:48:fd:a4:1a:48:02:b6:
1f:e6:c2:16:33:53:2b:88:fa:ae:c3:5b:b9:70:bd:37:4c:99:
7e:c4:0e:a8:d0:f4:63:d9:71:43:3c:c0:cc:7e:c9:c5:8c:a0:
36:da:a5:0b:ad:23:88:a5:ba:de:f8:09:c7:07:8f:02:21:f4:
0c:ed:d7:27:3b:37:fe:1a:e4:fe:94:10:e9:1d:eb:a6:7a:9b:
80:6f:67:2c:43:df:d3:a5:80:73:6a:78:34:d6:bc:d8:fb:59:
43:e5:7a:10:d9:62:66:bf:3a:d3:9f:d7:61:b6:3d:62:23:55:
63:33:d4:89:84:4f:85:55:51:b8:34:80:86:3a:52:4c:cd:ba:
c9:ca:c5:98:d6:47:f7:26:2d:b7:69:f5:30:fd:6c:be:7b:d7:
12:94:7a:8e:aa:ec:20:3f:c7:90:5d:1d:7f:5e:34:09:5f:4d:
9c:df:10:06:d2:c7:42:88:36:82:ce:8c:fc:80:1e:86:f7:21:
d6:87:a1:d8:99:c9:1c:8b:e2:9c:a8:be:ee:63:83:9c:84:b8:
ab:aa:ef:b8:7e:56:2c:79:d9:5b:e4:7d:6e:ea:39:ac:91:16:
a6:23:11:11:89:0b:3a:fd:98:bb:e4:73:1e:ab:8b:f6:a5:aa:
d9:48:cd:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fN7O3BaZESsOYT3VF6qwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj
NTY5NGUwHhcNMjUxMDE5MDgwMTI4WhcNMjUxMDIwMDgwMTI4WjAzMTEwLwYDVQQD
EyhlMTM1NzVjZDQ0NjU4YTViZTZjNzAzZmYyNzZlODAwOWQ0OTYwNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9l8ltiT9Uqj3iDHNEXtjMGi95P
d+YOaZQ4EY1bQbqf45QIU+6Pc9mXM5Qig3VLj/ZGd/AXZijYJHTLL3duDU3FRuwd
J+rswyWUmmclxAAzsLKogfKmawTk3JRXW0tAspYMCaIuE/iixX5ardQE0z6p6gk1
uLHm5+LZAuEck+niC2ORK4dVXiITszJbFKzDy+6eMFdBPdUKKLemz0UUtcSFqBZD
GJ3B/0cLBOGogqNFlu96KgCmJGjP5DFlAkMSDy8I/AbEzgHZKG+OJaHBeb3KUi72
FymGdoCgbvmmZg61XLA5476r5Pf7YViIaGC5moJmWNlxlTrzo9prbr9AoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE1dc1EZYpb5scD/ydugAnUlgZoMB8GA1UdIwQY
MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt
MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy
LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuOF+1+G
+Teb4GBI/aQaSAK2H+bCFjNTK4j6rsNbuXC9N0yZfsQOqND0Y9lxQzzAzH7JxYyg
NtqlC60jiKW63vgJxwePAiH0DO3XJzs3/hrk/pQQ6R3rpnqbgG9nLEPf06WAc2p4
NNa82PtZQ+V6ENliZr8605/XYbY9YiNVYzPUiYRPhVVRuDSAhjpSTM26ycrFmNZH
9yYtt2n1MP1svnvXEpR6jqrsID/HkF0df140CV9NnN8QBtLHQog2gs6M/IAehvch
1oeh2JnJHIvinKi+7mODnIS4q6rvuH5WLHnZW+R9buo5rJEWpiMREYkLOv2Yu+Rz
HquL9qWq2UjNKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:59 2025 by rpki-client