
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: 7bkvTpvSabrL0DjQhX382Vfn8bSrjRBg9vOwN4Ybrpo=
Subject key identifier: 22:9C:D5:3D:9E:FE:7C:CF:A2:0A:FC:A7:2B:1E:DC:F2:39:31:94:5A
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 0199FC586FB6826D86485F865511259CF4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 1057
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: ap4AaRNbO7qKxcUlEru82AjFZc/uwQFy4I6WK1LtcWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6f:b6:82:6d:86:48:5f:86:55:11:25:9c:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=229cd53d9efe7ccfa20afca72b1edcf23931945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:38:af:aa:d2:e7:ea:2c:2e:7a:da:00:27:
77:ed:5a:06:2f:c0:f5:b3:a9:1e:45:42:49:2e:51:
59:49:de:6e:5b:3a:c6:7a:5f:2b:03:a9:00:b4:98:
a9:a4:70:23:aa:07:8c:c5:d4:9b:eb:c5:a8:e5:74:
51:e0:a8:f4:2b:e8:75:4f:6d:d6:a0:7a:ae:89:2e:
81:28:3f:a1:6d:ca:17:7f:8e:1e:0b:81:1a:ce:a3:
87:d5:f1:86:24:0e:1a:01:ab:f8:fb:5c:c8:70:15:
6f:34:52:46:0e:55:86:16:29:d2:a8:94:7b:df:2f:
88:46:c1:77:35:ea:45:0f:d0:42:63:3d:73:d2:e1:
e3:ff:d3:76:a8:02:b3:02:51:4d:eb:30:42:82:5e:
59:58:22:92:58:0c:34:65:1e:e4:1c:16:0d:ca:88:
0d:1a:a3:bb:7b:5b:9e:60:76:c9:19:9e:53:67:47:
a7:fc:a3:7b:9b:a6:ef:0d:ad:bf:08:5e:d5:de:50:
f0:92:fc:db:a1:df:70:ce:c1:11:61:58:d8:fa:65:
40:07:47:b9:b7:bf:44:88:16:8e:35:ed:f9:04:0d:
15:2b:61:b8:24:d4:23:87:b1:b8:26:06:01:0b:5b:
68:4a:80:ff:74:c0:92:2d:bc:d9:23:f4:a2:52:00:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:D5:3D:9E:FE:7C:CF:A2:0A:FC:A7:2B:1E:DC:F2:39:31:94:5A
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2f:35:b1:f1:ab:13:d1:fd:5b:dc:cb:ef:5d:ff:b3:cc:54:
69:c9:7e:5e:6f:36:be:e8:06:93:94:8d:49:bc:00:1c:d5:6e:
12:94:f0:3e:7e:5e:9c:18:8d:0e:cb:5d:e3:64:89:99:25:43:
a5:d2:e2:aa:4a:4c:29:f5:63:e3:94:f6:46:bf:36:2a:2c:e1:
6d:dc:73:94:17:2f:cf:23:19:cc:55:43:bc:43:6a:bf:55:8d:
a7:c8:33:26:c4:12:1c:a9:13:80:a1:62:18:20:4a:75:fb:e1:
2f:aa:ae:93:ea:03:91:e8:d9:eb:8e:74:3f:94:58:82:35:a5:
b9:55:f2:5b:e7:f9:d6:c0:07:5b:73:ba:ef:5a:6b:e7:ea:5a:
ff:0c:54:dc:09:04:21:3d:43:9f:d2:44:b2:99:69:a1:5a:b2:
62:0f:bd:8f:d5:4b:3d:b9:f2:22:b0:a8:52:16:d0:21:85:90:
ab:10:9e:ef:15:be:9b:2b:54:8d:f4:1b:97:cd:47:b9:ed:27:
d9:cd:1b:f8:a1:4b:56:1b:34:14:4d:47:5d:86:c2:b5:3b:a3:
fe:f1:29:87:46:3d:81:7b:20:4b:1c:4d:13:51:ae:5d:d8:84:
56:8e:d0:c1:e8:46:e0:07:48:87:cb:54:66:a8:cd:0f:7b:4d:
3b:f9:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:07 2025 by rpki-client