Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: 0Yib+BQQCTlfgUnSlHZABzusjntldIEy03WPcOvCBQ0=
Subject key identifier: 15:C5:33:43:2F:DA:81:AC:82:AE:8C:5F:AC:5F:58:C4:1D:6C:1B:AA
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 0199FEEBB4EC0DD10D8C548777DF9B426DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0AD2
Signing time: Mon 20 Oct 2025 00:01:24 +0000
Manifest this update: Mon 20 Oct 2025 00:01:24 +0000
Manifest next update: Tue 21 Oct 2025 00:01:24 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: bHxvh1I09nPTxsUifOaN7AmDvJWC4SbaCM2VbCulNis=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b4:ec:0d:d1:0d:8c:54:87:77:df:9b:42:6d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Oct 20 00:01:24 2025 GMT
Not After : Oct 21 00:01:24 2025 GMT
Subject: CN=15c533432fda81ac82ae8c5fac5f58c41d6c1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:4a:ba:11:cd:d2:18:1b:bb:8b:bb:f4:d2:
3f:45:97:92:59:ad:26:2e:9d:39:7a:51:d0:29:10:
ef:fb:d8:7c:52:44:df:ac:00:d3:3c:fa:ca:f4:64:
79:49:c4:33:0b:ab:ea:1d:ae:0d:c1:2c:75:4c:f1:
31:28:84:0f:7f:45:a3:48:ff:6b:1b:fb:9f:4c:b6:
7b:70:e7:83:9b:a3:d1:4b:e8:9d:2d:d9:10:f2:b8:
e9:f0:4b:85:71:35:cc:21:a4:93:65:c3:44:85:0b:
2e:4c:79:d9:ee:9b:91:2c:18:f7:a3:3a:87:dd:be:
ec:83:98:da:e7:85:8b:ff:84:b1:ed:f6:b6:9c:39:
94:74:5d:76:27:98:d2:e8:f2:31:64:b4:c8:50:c0:
78:40:97:dd:51:2c:2b:4d:ac:7a:f2:da:dd:c4:ce:
b0:b3:45:30:74:c5:36:0e:2b:ff:fc:7b:a4:c1:46:
83:8a:41:d3:34:22:19:04:9e:1e:4f:a0:bc:2d:96:
a9:ca:14:a7:86:08:b8:82:a0:fd:8b:ae:4b:6c:d4:
fc:4c:9e:03:57:43:78:6a:93:b0:af:83:16:40:e8:
c6:8c:1d:0c:ac:60:78:92:f1:12:09:e7:2b:d4:a5:
bb:1d:b6:06:17:6c:8d:ad:fd:5b:6e:a6:26:c6:90:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:33:43:2F:DA:81:AC:82:AE:8C:5F:AC:5F:58:C4:1D:6C:1B:AA
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:59:fd:e8:b5:15:82:f6:0c:17:61:c5:97:2c:f4:1f:c1:
de:c3:1a:7c:80:44:c6:fd:98:31:d0:43:95:2c:d3:ab:e9:a7:
77:3e:81:27:a1:71:8b:dd:da:56:41:c4:48:be:4b:f3:70:7b:
33:78:f2:7e:76:08:33:f8:51:2c:25:69:29:fc:ad:2c:f0:77:
7b:33:99:30:50:93:e5:f6:eb:f4:f4:4d:a5:59:87:83:54:00:
8a:ba:02:5c:f8:d5:6e:28:b0:a8:b9:c2:02:bf:78:08:1d:40:
cd:80:aa:e1:96:9c:04:4d:ab:74:f4:62:59:3a:05:3a:53:18:
54:d7:9b:92:d3:83:e2:00:c1:30:84:a5:87:96:b8:41:85:c9:
86:12:1c:1a:a5:c3:71:25:2e:a8:ce:4f:5a:f2:12:5f:06:04:
05:7c:49:c3:bc:15:9f:0b:4b:eb:51:e3:c2:2e:6b:b2:ff:a4:
1d:1a:3f:ba:f1:7d:f2:25:ff:d5:97:d4:12:52:be:10:f2:c3:
64:5e:da:b8:a2:79:8d:f9:31:e4:0b:a9:e2:6c:09:d4:59:c5:
9a:8a:55:ad:a0:22:26:f5:4d:57:1d:97:ed:13:b6:5b:0a:10:
c7:a3:97:f2:c8:59:8a:2d:d2:1a:4a:99:34:e4:ef:74:8f:32:
fc:42:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:54:47 2025 by rpki-client