Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier: AGntD8GgY9+BsBrtlQde1yFOrtLTxlp8D324og9CHfM=
Subject key identifier: 69:2C:BD:2B:8D:8A:2E:6C:F3:57:2C:78:6D:67:EE:B1:DC:BA:4B:A8
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial: 0199FC8F93A9BE74508FDA3AAE9943DBDAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number: 0FDD
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: Hlmz1/rFmWcG2OCi86ozX/MfdR4is77LgM4goWKNwGI=)
2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:93:a9:be:74:50:8f:da:3a:ae:99:43:db:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=692cbd2b8d8a2e6cf3572c786d67eeb1dcba4ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:72:40:57:66:85:76:84:f8:e8:0f:54:72:
e5:c8:03:e0:75:eb:a3:f4:62:b0:46:7d:fd:94:e6:
6a:96:2e:9a:5a:39:f6:1f:01:58:36:a5:b6:d7:eb:
88:83:c5:2c:9e:97:1d:ad:92:4d:7d:ca:b1:92:60:
95:e4:6c:18:f8:32:86:65:29:52:13:fe:2d:ed:51:
3c:6b:06:c3:04:0c:34:51:e6:54:f9:92:ea:30:26:
9f:15:ad:f0:e9:56:6a:6a:fa:0d:90:52:bc:5d:bd:
02:9f:d7:9b:f1:81:9f:42:b3:ec:d5:13:fa:38:80:
c0:99:39:c4:bf:64:e1:e2:df:76:c5:26:44:7e:35:
2d:6c:34:5b:8c:b5:25:a7:2b:f9:20:8d:39:90:80:
43:d7:4a:fd:18:5d:3b:35:c3:d9:ff:bb:75:c6:6b:
52:9e:2d:03:96:97:01:44:e2:57:b6:3e:19:a0:ef:
d3:e0:e3:3c:18:9f:cd:a1:d5:5a:e1:73:9e:bf:84:
86:e7:b0:29:7a:09:04:0f:e3:42:98:68:19:72:02:
d9:56:f8:5d:00:6e:4f:61:eb:85:1d:5b:ed:f1:82:
68:d6:fb:83:85:ae:e4:72:1c:59:60:7f:c2:d6:0b:
b6:e2:88:59:48:c3:5c:a6:01:d6:8e:10:14:61:b6:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:BD:2B:8D:8A:2E:6C:F3:57:2C:78:6D:67:EE:B1:DC:BA:4B:A8
X509v3 Authority Key Identifier:
keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:37:31:eb:1d:b4:b7:c9:15:02:37:b9:61:ef:fe:83:ad:9b:
26:8d:4c:30:f9:92:31:5e:d3:fe:65:40:24:fd:c8:aa:7a:63:
e0:f0:3a:74:7d:12:0a:2d:8c:e4:d0:b8:5b:ed:2a:10:1c:fe:
24:96:41:18:32:eb:c5:38:9f:14:c4:dc:8a:69:fc:36:89:7d:
5b:a8:29:2a:ce:2f:6c:3a:51:92:2a:a2:d5:cc:3d:01:b2:2d:
ff:18:9c:f7:f9:4c:11:9e:78:f3:51:0a:0e:1a:10:8c:95:b0:
7e:a6:75:60:3c:5c:82:87:04:6d:f4:13:90:cb:a0:75:4f:72:
45:55:c3:5b:56:ba:56:dc:9f:aa:85:3c:98:c7:69:8b:8a:6c:
4c:2a:87:65:14:93:50:f5:b0:b8:ca:59:63:ec:3b:66:36:24:
a7:ec:c1:67:ee:36:6c:3c:1c:43:8b:4c:8b:ea:45:1a:4d:a6:
2e:ec:04:38:e5:05:dc:c6:97:10:38:40:dc:6e:33:fb:9d:94:
90:f4:8a:e6:15:7e:fc:38:e4:33:dc:f5:2b:e2:4e:eb:a9:17:
40:d9:ea:ff:ce:a2:cb:10:2b:f7:8b:0e:55:43:7e:f1:c0:35:
cd:02:76:11:cd:e3:15:d0:dd:e2:4a:cb:95:24:06:c2:7d:07:
dd:25:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:08 2025 by rpki-client