Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: kibeCIY4REoGVhkfJNtf1H4RVn1DFn1ZlSunKr+3z6c=
Subject key identifier: E8:F2:3F:23:54:57:EE:83:20:DD:32:61:77:48:84:1F:78:78:73:D3
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 0199FCC6CEA0DF7EBF40330B3190F1AD0D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: q96BUqszD0gbTNjZ6qxxHntI7KErMqlAysFWgQC8i7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ce:a0:df:7e:bf:40:33:0b:31:90:f1:ad:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=e8f23f235457ee8320dd32617748841f787873d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:f3:65:1c:7c:29:dc:b9:90:05:f7:55:be:
ac:a3:27:58:6f:fe:53:a0:03:44:18:3c:26:bb:ca:
81:8c:db:8c:41:fd:e7:cd:a1:14:73:18:f9:c2:9f:
99:3a:94:b3:21:2d:9f:3f:01:24:60:32:f9:cb:7a:
3b:84:b8:f4:2c:00:5c:a1:04:5b:f0:1d:66:78:09:
06:a3:9e:34:3c:ff:65:ea:4f:7a:1b:1a:cc:ac:f6:
16:84:31:46:e0:9a:27:e5:95:e2:4c:ae:2e:61:f2:
61:71:c2:5d:9c:a9:ef:25:16:80:f6:80:76:43:38:
a3:67:b0:cc:59:ff:3b:a1:d5:ce:8e:ab:52:e2:e3:
e7:01:c8:90:b6:99:86:0f:d4:de:d2:8b:ba:87:61:
66:8f:ad:22:8d:65:b1:fd:f9:17:bb:2f:a3:9d:45:
8c:90:c7:3f:41:0d:bb:5d:12:1f:23:35:e6:27:73:
c6:09:8c:37:60:4f:07:af:4f:7c:34:94:21:85:cf:
11:81:57:17:f7:c5:65:ee:b0:7e:1b:9a:10:90:96:
62:32:df:f4:d7:36:63:e3:92:24:64:d7:0a:0a:9f:
c3:78:51:1c:32:51:c2:06:d6:4c:fc:b1:32:d8:93:
18:76:10:fb:fd:18:62:34:dd:aa:c2:49:19:0b:bc:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:3F:23:54:57:EE:83:20:DD:32:61:77:48:84:1F:78:78:73:D3
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e9:c9:cf:97:f3:77:fb:4c:2f:00:0b:8c:cf:74:bc:eb:ca:
9a:50:2a:6b:ca:a8:7d:c0:22:0a:62:73:91:ff:63:42:e2:dd:
3b:3d:4e:8b:68:78:87:57:35:a3:d1:6f:69:35:4d:1f:47:4e:
45:05:cc:d7:1a:d5:4a:4c:cf:a5:26:11:f4:93:22:76:b8:15:
9f:66:7c:26:52:a8:5c:c3:4d:3d:e2:63:3d:32:89:ed:41:18:
93:11:35:32:f8:5b:7e:e7:7f:69:b5:fe:82:42:69:d0:66:d0:
8c:5c:fa:82:c5:3a:4f:c3:69:61:18:65:0e:57:2e:e6:77:84:
66:0f:52:29:cd:e6:5d:74:8f:9c:08:06:f7:b2:83:c4:d9:16:
8e:1c:3e:69:84:9d:0c:b2:00:97:88:72:13:55:bd:5d:2e:d0:
0b:c0:9c:11:26:a7:b9:f3:cf:bf:c5:a4:70:61:6e:91:84:c8:
5e:4d:72:9f:0c:21:29:e7:ab:2f:27:39:36:e7:be:b8:ff:29:
f9:fb:f1:ab:f6:02:c1:d8:5a:86:a9:0e:b9:9b:c9:60:54:02:
f6:af:e0:03:8c:1a:1c:85:df:59:7e:65:23:59:12:a0:e0:90:
fe:82:4c:18:fb:76:e8:5f:b5:79:59:94:5c:db:b1:e2:e2:0c:
bd:ef:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:40 2025 by rpki-client