Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json)
Hash identifier: sJHnu/IRZ0fSPEMcQ9e9g0d2OMoDsMQyrFQOHjLQKvM=
Subject key identifier: BB:8E:6D:C0:30:04:8B:78:CF:EF:C9:F5:DC:7A:7C:0E:19:D4:AC:DF
Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Certificate serial: 0199FC21975D264C60C5B02B0E4E64802C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: S+zfDjdhcLYeLPrHLJeEVrSfFPdDK0pmoCB4CjWRri0=)
2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:97:5d:26:4c:60:c5:b0:2b:0e:4e:64:80:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=bb8e6dc030048b78cfefc9f5dc7a7c0e19d4acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:28:4f:e9:8b:b7:c5:be:83:f1:5d:9b:fd:
9b:25:11:31:30:0e:53:31:83:ff:6b:2a:de:fd:15:
8c:84:f2:d5:96:4f:31:9b:9b:56:b4:06:1e:4f:d5:
69:b3:73:cb:72:21:21:a4:bd:c8:eb:62:17:a9:04:
f0:d8:e3:16:ef:ca:65:86:3d:44:2e:8d:b4:a0:5d:
dc:ac:ca:ca:34:5d:64:58:5b:fc:e8:87:a8:7c:dc:
68:85:1b:15:22:ed:5f:19:da:84:66:9c:1b:e3:84:
c1:e3:75:de:2a:34:1c:e8:3a:41:ba:98:14:59:83:
a2:b6:ba:a5:ac:0f:42:fc:b8:78:7a:28:d5:d9:0e:
ed:57:57:d9:5c:f2:2f:f3:70:64:cc:a4:5a:8a:74:
7c:34:07:0f:29:e5:66:5d:68:fb:b1:fb:fd:9c:9b:
44:1f:b2:b3:c4:21:57:cc:98:fe:0f:18:8c:b1:46:
a4:46:0c:10:86:bd:8e:6a:20:df:00:8b:7d:bc:12:
87:c9:77:d8:1b:46:0a:54:94:a5:07:3b:00:91:9b:
77:dd:eb:51:e4:5e:22:a0:6e:6a:c8:29:f1:ac:f2:
c5:34:ff:bf:d9:27:30:68:da:09:b1:fb:6f:15:4a:
4d:00:a4:75:ab:71:9b:15:4f:ac:d5:4a:2d:6d:3d:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:6D:C0:30:04:8B:78:CF:EF:C9:F5:DC:7A:7C:0E:19:D4:AC:DF
X509v3 Authority Key Identifier:
keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:67:44:1b:1f:ea:ee:dd:93:c6:57:03:26:c8:8b:85:15:
69:c7:5e:24:11:15:d5:60:98:f2:dc:12:01:37:65:72:de:33:
a2:83:46:ec:eb:cf:cd:12:3c:17:cb:38:79:69:6f:c2:42:3c:
19:25:2a:d4:ac:43:1a:64:59:03:93:3a:89:a5:65:89:5c:46:
d3:b3:c7:af:cf:52:ac:94:38:70:b0:0f:f8:33:63:a7:2f:58:
bf:45:92:e2:df:60:2a:cf:89:88:1c:f6:fd:3e:66:73:83:34:
f4:fc:66:f8:aa:c3:65:b0:8b:b1:7f:ec:eb:1d:25:8b:35:77:
c2:0b:eb:5a:76:28:8a:3a:c1:94:91:24:5c:6b:8a:98:d4:33:
36:dc:a9:4b:7b:d8:12:20:b0:f0:32:32:ce:f8:ca:17:30:d6:
cc:26:68:6a:b6:53:19:5d:8e:41:6b:18:5c:c9:a9:b7:5f:89:
c3:60:47:50:6d:f3:a3:e4:50:9c:8e:57:71:1b:2b:26:bb:eb:
d2:e1:9e:bc:cb:dd:f0:c1:10:70:72:17:55:e5:eb:8f:49:11:
7f:ca:3a:d6:76:36:54:60:65:50:58:89:ca:b9:2e:69:aa:1d:
48:00:51:40:c8:b7:d3:f2:f2:30:ce:da:1d:93:2a:ee:44:ec:
86:33:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:30 2025 by rpki-client