Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: IhD+CTchKwhdkECqs3bB5EKB8whraSJSipgzRffwtqw=
Subject key identifier: 2B:6C:79:DA:9E:2C:19:50:BF:A3:31:B1:3E:2E:01:BB:48:ED:24:BC
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0199FC8FC98CED1492D13178C927F5A02628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: 1h6I7yathuhdvJgvI7zWaIqhF1I.roa (hash: eS/E0Xfzx+BcTRnP1WHF9rHrs364VBPb5lL4n4E58IM=)
2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: AQEactgvzC313+VVPt21f5VjTc32L/fBcfXxaGwUSdg=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c9:8c:ed:14:92:d1:31:78:c9:27:f5:a0:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=2b6c79da9e2c1950bfa331b13e2e01bb48ed24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:49:79:c6:21:b5:3e:fa:7b:e6:40:da:b2:
7d:2b:8e:14:03:ea:66:e7:51:31:bb:e8:2c:7e:a6:
12:65:7b:3d:b5:2a:32:f4:70:73:60:9f:73:8c:95:
02:7f:8a:39:d0:9a:a5:b6:3f:60:4b:17:2a:a8:0e:
37:8e:8d:8d:69:89:2c:47:b0:00:fb:f7:3e:21:54:
4f:65:f4:bb:c2:28:14:15:a6:14:44:f0:15:08:00:
39:e4:78:b6:bc:af:52:af:a3:4e:38:1a:1f:2e:ef:
fd:79:94:0f:2e:ba:ae:12:bb:bb:10:9d:d0:11:dd:
e0:28:05:c5:1e:1e:8d:34:84:7e:ee:1b:cb:b4:57:
ae:af:9d:c4:59:53:84:45:0d:ed:85:5d:be:b1:69:
91:88:3a:7e:02:36:91:60:19:ae:6e:b0:4e:29:a4:
68:06:ec:bf:88:78:e4:46:d4:e8:cb:33:76:d1:19:
03:3d:bd:85:e3:fe:f3:6f:ad:c0:5e:8d:04:6f:7d:
22:ea:14:e8:fa:2a:d3:70:4b:dd:93:f0:4d:5a:bd:
4b:15:2e:9c:7b:05:a4:82:ea:9e:e3:ed:ad:29:ba:
19:ad:ac:07:0b:09:05:e2:79:56:cb:ff:17:5e:91:
96:37:87:16:4f:f1:4b:fd:bc:1c:ea:78:f9:b2:a7:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:79:DA:9E:2C:19:50:BF:A3:31:B1:3E:2E:01:BB:48:ED:24:BC
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:3c:48:b1:d9:82:d5:39:9a:15:c1:b1:55:9b:56:de:2d:
7e:b0:7c:cb:b4:8f:0d:b4:53:fd:d4:df:d5:b0:7a:28:e1:76:
92:02:fa:c5:e8:a4:db:37:96:39:50:80:fe:30:08:61:dc:57:
4d:10:13:95:84:7f:37:49:b3:e9:63:04:7a:f4:cc:28:d5:26:
c2:94:b8:fa:27:29:0f:b1:3f:24:7a:1d:61:9d:3b:53:5c:5b:
7b:e4:3a:ac:38:5f:7d:d4:53:a2:0d:b4:1a:29:0b:10:a7:01:
b7:7d:da:81:c2:78:9d:98:36:ba:2d:54:12:17:80:17:5e:86:
e6:da:a0:7c:ab:4b:7a:18:db:14:68:c6:69:af:ec:82:d7:30:
0a:36:f5:f8:ac:af:ca:4c:d0:80:56:0d:a1:a3:24:c6:d2:03:
8d:11:6f:2b:92:e9:5f:9c:cf:24:c1:97:a6:fb:05:27:fe:a8:
7c:30:42:f0:be:8a:9d:89:69:28:e3:9d:44:ba:ef:5a:78:a3:
5c:0f:af:bb:a7:ae:79:38:d0:59:ab:05:cb:d4:c1:fe:50:40:
8d:81:8d:3b:63:3a:39:18:56:cc:7b:cd:7e:d1:de:c1:c2:1c:
e0:a9:cd:63:91:65:47:8c:53:4a:7a:97:85:29:95:88:b2:2d:
f6:a0:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:48 2025 by rpki-client