Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: kN7mmPiwy4V1VEWcm6K4pin5Wfw6Ub0pSeXcVg3SfuU=
Subject key identifier: AB:DE:91:04:6D:64:F8:36:E6:FF:BE:7B:6B:D7:1A:BA:09:DD:28:CF
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 0199FCC62DCFD31693B29D735169C09084DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: poUmi2jZaL+C4pTmAjhfLYmkejyUM+FfpvrKD08PDpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2d:cf:d3:16:93:b2:9d:73:51:69:c0:90:84:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=abde91046d64f836e6ffbe7b6bd71aba09dd28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:46:db:ac:71:41:8d:81:da:98:0f:fc:ee:
ce:a1:2b:7d:bb:d9:17:61:82:24:34:85:ca:1e:04:
15:f5:3a:a8:d5:f9:a7:c4:d1:67:01:96:a7:4a:f4:
e8:41:da:7a:17:fb:a8:25:38:eb:42:e8:cf:5f:ea:
52:ae:8f:fb:d8:1c:0f:ee:7e:0d:8e:0b:a1:15:a7:
f7:39:b6:81:7b:8e:1c:b4:9e:00:76:b9:60:56:33:
e1:49:75:1d:d0:06:c2:9c:f9:c7:aa:e2:53:89:fd:
3f:d5:8c:4f:ac:d2:47:f4:4e:3f:08:f6:9d:b9:40:
7d:fd:a3:a0:dc:c6:26:19:6e:ff:30:b4:84:f2:3c:
45:68:5b:31:a1:da:d4:9c:99:08:fe:7c:05:81:85:
ba:87:55:88:88:46:bd:86:52:f6:54:0c:7e:19:d6:
87:be:6e:3f:5c:0d:84:e8:b2:b8:62:bf:da:af:50:
5d:2c:8e:78:96:d7:e4:f9:be:9c:20:db:20:7f:ce:
81:19:30:9d:65:88:fc:98:0b:c6:70:a2:ac:24:90:
b7:2c:2a:b1:20:bf:c1:bc:a6:d5:e3:29:33:02:70:
fa:19:35:de:c5:de:5d:e7:34:fd:c2:90:ad:21:5d:
fc:c7:90:4f:2e:5c:c2:61:51:b7:df:7e:d3:c7:64:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:91:04:6D:64:F8:36:E6:FF:BE:7B:6B:D7:1A:BA:09:DD:28:CF
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:53:1c:d6:5c:6e:c2:81:ff:ee:91:72:87:5f:0f:fa:f4:60:
f1:06:34:f6:79:37:7c:c6:67:e5:85:5f:30:c7:96:65:ec:97:
4c:c0:0b:fc:5d:24:2e:69:96:05:ec:4d:bf:84:8e:34:87:1f:
33:b6:69:99:85:b2:8a:62:6b:02:b9:b4:59:15:6c:16:b1:ec:
fc:16:a1:d8:c8:01:5d:af:6e:47:c0:35:67:3e:07:f7:1e:2c:
dc:e8:a6:4b:d2:a9:84:38:f7:a4:43:01:8e:76:d2:64:1d:8b:
4f:54:6f:f9:3f:62:64:f1:3d:73:96:11:7e:c8:60:11:39:29:
5c:e0:24:b2:00:b1:2c:1b:ac:42:c9:70:d6:20:cf:b1:d0:32:
4a:ff:a2:9a:f8:98:8c:98:c3:4a:13:7e:23:42:6e:6e:b6:98:
bc:8f:b5:1d:19:1c:48:6f:e2:be:d2:7b:48:ef:b2:a5:52:06:
f1:63:f3:73:1d:a7:12:58:d5:48:a4:fe:a6:b9:3a:d9:e5:51:
54:a9:3a:dc:67:0f:bc:18:eb:91:e7:36:79:be:76:9f:51:c1:
a3:75:60:55:e9:fd:37:a3:4b:31:eb:d6:b3:a8:00:39:8e:6c:
45:cb:47:11:b5:0e:75:2c:ad:5e:38:a2:50:20:e2:7f:33:10:
3c:29:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:10 2025 by rpki-client