
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: 8xcW20J54nytxfSQTwCI2jQNkWdl3lNvmHvSpmEneSc=
Subject key identifier: 32:D8:4D:63:B9:5E:BF:5F:13:0E:A0:31:76:54:FF:8B:2E:04:31:98
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0199FA69FA6057709153D3ABCFD150350BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 06B2
Signing time: Sun 19 Oct 2025 03:01:13 +0000
Manifest this update: Sun 19 Oct 2025 03:01:13 +0000
Manifest next update: Mon 20 Oct 2025 03:01:13 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: uGTnxgnL/PqgxJA4OQ8GizhFk+EWcYh7l86XB9fFemE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:fa:60:57:70:91:53:d3:ab:cf:d1:50:35:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Oct 19 03:01:13 2025 GMT
Not After : Oct 20 03:01:13 2025 GMT
Subject: CN=32d84d63b95ebf5f130ea0317654ff8b2e043198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:a5:54:14:1c:38:d9:dd:4b:6d:ef:1b:bf:
11:ac:ac:7a:7a:d6:02:fc:97:34:87:de:48:c0:3c:
fa:61:26:02:32:25:b8:db:ed:3c:c3:de:64:69:07:
8b:e9:ed:54:04:6c:b8:a8:09:20:70:57:1d:9c:ac:
9a:1e:df:50:5b:57:ad:d0:1f:58:90:99:ef:ea:ca:
05:7c:5b:c4:f6:6a:89:3d:2f:24:e1:01:b4:8e:fd:
1d:8b:cc:80:c2:57:f6:0a:6e:bf:8a:ee:1d:f8:94:
33:e0:21:2a:eb:12:38:d1:bb:cd:3d:df:a8:4c:67:
2a:c6:98:ba:75:69:a2:0b:aa:e5:ab:31:8f:b3:10:
22:7c:3b:de:c7:8d:fe:0d:02:33:bb:de:63:f2:5a:
23:43:6a:7f:53:08:74:90:14:7b:f1:2e:92:a2:6c:
6a:9c:6a:0d:81:ca:2b:e4:0e:9b:c1:24:b6:9d:f0:
4e:4c:75:76:33:bc:3c:33:2f:aa:12:77:2f:04:f8:
bb:51:96:c4:40:55:06:f6:a9:68:5f:a8:e7:c0:00:
ad:7c:f5:03:b8:21:af:57:c5:16:e3:ef:ee:16:9c:
a4:50:cb:58:04:7e:af:51:53:d8:3a:25:c3:74:9c:
c4:ea:60:f1:b3:d8:aa:a7:dc:ff:85:8e:33:de:a4:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:4D:63:B9:5E:BF:5F:13:0E:A0:31:76:54:FF:8B:2E:04:31:98
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:48:42:2e:60:36:6f:9e:33:1f:97:dc:bc:dc:ac:60:cb:0a:
2e:2b:ca:0f:61:4f:0b:a9:eb:b6:20:e2:14:29:6c:b6:f6:6a:
ba:4d:56:eb:45:58:e3:a5:25:bc:25:91:12:19:2b:e6:f8:02:
14:0d:ac:1a:9b:80:f7:05:1e:d4:ff:ed:19:75:26:4f:3d:c3:
2f:84:d1:5f:69:aa:5b:0b:04:31:3c:66:3b:2f:f7:ad:84:43:
16:05:9e:b7:1a:7a:75:01:d1:ca:00:19:f7:fb:44:5f:0d:b9:
62:75:de:82:86:7c:3d:4e:a9:14:f1:09:04:eb:68:0f:1b:66:
78:c5:1f:64:1f:9b:ff:71:d1:67:5c:ee:ef:81:2b:9d:76:00:
43:52:b8:a6:86:27:99:6c:41:e0:b3:87:96:bc:03:a3:98:1e:
0e:5d:49:55:61:54:a6:41:8a:68:f5:30:df:d3:fc:56:d2:dd:
80:30:d7:e7:76:17:2b:7f:2e:db:94:0f:03:6e:02:d3:ce:96:
be:cb:9b:8d:6a:39:5e:c0:44:ee:b8:fb:e7:ec:6f:05:21:03:
fb:c8:67:52:30:09:97:f9:bc:48:43:fe:f2:44:f6:a1:43:2f:
e5:aa:d7:42:7f:fb:a5:28:d5:78:c3:76:fc:c0:40:73:57:c2:
ad:85:82:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:41 2025 by rpki-client