Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: GS2vgFkSR+g8bzB/CMjMxw0d4U6S1qHxoi+A575VhS4=
Subject key identifier: B2:D0:36:25:35:21:E0:F5:A5:37:4E:B3:DD:25:01:A3:C3:6B:09:7E
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 0199FCC607E7C3ECB13392DDDDC34B13FBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 14AF
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: JFNJWl6HjcSPwBkRRHbXE4VDXbxBDco12Zjgve/aioI=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:07:e7:c3:ec:b1:33:92:dd:dd:c3:4b:13:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=b2d036253521e0f5a5374eb3dd2501a3c36b097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:88:bf:7a:77:ff:b7:5d:c7:00:3c:0a:c2:
00:85:4c:76:c3:18:50:f7:34:d6:04:fc:74:f3:92:
c0:5b:70:19:0b:af:15:f0:b8:c9:11:93:04:9a:07:
64:ad:ca:ea:12:3f:ad:e2:57:ac:a7:74:17:f3:6c:
16:1c:39:88:23:d0:45:90:65:ba:f4:4c:2a:1b:04:
bc:80:cf:3f:b0:58:8a:18:25:b6:c8:eb:d0:79:33:
ac:89:13:93:16:89:b3:c6:0f:bd:d5:e8:83:41:d7:
31:71:37:a9:35:0f:e9:db:b8:4e:ba:42:95:44:90:
89:e3:69:53:9b:42:f3:50:55:81:0d:d7:86:a2:e8:
95:79:31:a2:7c:3e:a0:06:c4:67:f8:c9:46:a4:d6:
20:95:ea:51:97:ee:08:de:5e:de:ea:4f:6b:c1:85:
c7:75:73:f8:5d:48:0c:9d:f5:c8:e9:39:af:19:39:
d6:af:49:ee:44:b1:15:cc:59:89:c8:b1:ca:1d:e3:
b1:4d:2f:86:a1:f5:cf:16:9f:69:e0:47:78:9f:37:
a8:4c:5a:d7:97:60:a3:f8:bd:40:66:ab:cd:5c:fc:
28:63:3f:a9:c8:1c:80:39:2d:26:33:22:b0:ee:cf:
2f:18:0e:5c:70:83:7f:94:c6:bb:1b:e1:dd:e1:02:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:36:25:35:21:E0:F5:A5:37:4E:B3:DD:25:01:A3:C3:6B:09:7E
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:10:73:04:92:8b:18:8e:6c:9c:aa:06:50:f6:94:30:09:
72:9c:4e:d8:7b:14:28:df:10:fb:6c:82:52:70:40:70:29:c1:
de:1f:4c:f8:b2:f0:73:1c:be:9d:c2:7b:f5:3c:31:3c:85:ec:
98:aa:a4:3f:ad:b6:99:13:58:7d:24:27:13:17:12:86:28:7d:
a9:45:72:a0:20:95:93:75:5a:a0:cc:4f:a8:09:3c:55:88:45:
8c:7b:6a:a6:9c:5f:a1:1c:6c:33:bb:f1:bc:b8:90:c2:e0:2b:
39:11:ad:dc:a5:34:50:cc:d0:7e:ee:3f:8b:06:09:ff:6e:d0:
c6:91:62:46:a9:e6:60:93:01:df:4b:8d:1a:1d:46:bd:2a:1f:
18:c4:16:13:58:dd:c3:7d:20:df:46:20:d7:38:24:2b:e3:96:
66:01:b1:bc:66:6f:09:18:9b:e9:0d:e6:94:e5:f0:5d:e5:e3:
0b:82:42:f5:e7:c1:2e:87:19:ac:45:89:1c:3e:ac:d3:52:5d:
53:37:ed:61:63:94:a2:59:1e:65:db:4c:0b:7e:a5:9d:96:de:
b5:8e:97:3c:8d:86:c2:11:a6:0a:56:5a:ea:49:8a:78:90:b7:
5b:cd:7a:0b:aa:9b:9e:d5:eb:60:c3:2b:92:15:f7:6b:e8:09:
aa:d6:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:37 2025 by rpki-client