Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: aND77EOhdRPAYCoWfGY+0phL7bemMj1/y7lTHTscL+o=
Subject key identifier: 08:9D:32:8E:2A:98:01:A3:EF:3E:31:7C:0C:85:4D:84:23:5D:94:6A
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0199FDD9CC2B91972C6C2A48F97344FAAF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0A05
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: 7RA/LJZqPkhYiKiVzETeicJ5EUshwVtJsulPtKnF5vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:cc:2b:91:97:2c:6c:2a:48:f9:73:44:fa:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=089d328e2a9801a3ef3e317c0c854d84235d946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:6a:04:c6:c1:c2:4a:16:22:ab:1f:1c:4f:
1c:3d:f1:fd:41:a6:fd:a1:69:1a:fc:73:2e:06:88:
bf:a9:b9:8c:99:e6:fa:e5:74:5e:f0:77:27:97:2b:
f2:ce:4c:56:a9:4b:78:17:e9:40:c8:62:65:08:6c:
fc:fb:71:39:55:9f:95:af:91:57:37:84:ce:37:16:
20:40:3a:4d:74:49:9e:c1:8b:ab:17:22:4e:21:f3:
b1:95:80:69:ea:90:d5:22:ff:09:51:20:58:c9:25:
36:63:5a:d7:af:e6:45:7f:b1:56:6d:b7:cd:e6:ed:
b3:e5:c8:1d:2c:82:c6:2f:83:48:d7:c6:9e:dc:15:
25:e7:fd:8b:57:83:22:88:52:3f:5d:d3:8f:73:93:
8f:2d:c4:8e:2f:d0:39:b2:a7:12:1e:f6:58:4d:19:
4d:12:8f:7e:08:a9:26:b1:e6:e8:44:79:7a:b9:f3:
e2:1d:59:d5:a5:c0:d8:31:7f:8f:e0:44:ef:1a:e1:
1a:47:d4:1d:8c:35:32:4f:e8:f1:d5:87:be:bf:a6:
d6:f2:9e:92:b7:ca:52:3f:2e:b7:50:19:20:14:83:
42:da:72:93:bb:b8:d2:37:b0:18:83:17:99:95:22:
3d:c8:c3:c6:15:12:41:65:97:10:b2:dd:7a:6f:07:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:32:8E:2A:98:01:A3:EF:3E:31:7C:0C:85:4D:84:23:5D:94:6A
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:74:45:2e:90:a8:39:e6:0d:be:38:07:0f:bb:c1:fd:18:96:
c6:e8:f1:f2:e5:5f:c2:8a:34:dc:e5:b9:7f:c1:b5:3d:c4:1d:
64:e4:8a:4f:25:f0:01:f1:d0:50:73:a9:ca:8f:97:41:d4:92:
8f:68:bd:5a:27:b2:46:a9:ea:a7:80:54:55:8c:5d:8d:f0:f9:
3f:00:8d:a1:de:da:dd:91:3e:9b:d7:7e:ac:3d:b1:9e:c3:b9:
b3:8b:1a:05:55:bc:49:f8:00:2f:f8:da:fb:79:4c:db:db:54:
f1:66:18:95:4d:ab:4c:f8:fc:8f:33:52:a5:42:36:10:59:90:
cf:b5:e0:a0:69:cf:33:3d:d7:9c:e0:cd:be:b4:17:a6:4d:fb:
74:3d:3b:23:34:c2:db:52:f1:c1:6b:42:1b:7c:b9:91:0a:67:
62:ad:89:67:8c:65:ce:6a:8f:8c:76:e9:64:88:3a:f8:5a:97:
ac:35:2d:c4:dc:e8:4c:4b:ba:8d:0b:e9:74:88:29:73:59:d7:
05:c3:12:33:76:9a:a7:5c:84:d5:a0:82:62:22:de:ec:80:93:
91:94:cb:29:5b:7b:ea:eb:f5:c1:51:35:fe:44:a9:ce:54:b4:
03:d6:b5:76:c5:af:a6:e0:5c:72:91:ea:f9:35:19:17:9f:80:
36:1e:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:59 2025 by rpki-client