Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json)
Hash identifier: EAAhZu4KpwYFioJ5+PNfOPkW0nUEoO4BcJF0HHFVUxU=
Subject key identifier: 3F:91:89:61:C4:05:A4:E4:50:DD:17:04:35:FB:7F:91:48:54:A5:10
Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Certificate serial: 0199FD6B1D71CE74C7ED97EB3584B94F29A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
Manifest number: 013D
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: JxOn2i/r7UKg9imSdeo91UvsyROkwLQpc8IoBGEPrBQ=)
2: S8TepbiQXeRCqnwRb_Kf4gbokA4.roa (hash: Z/Vh03WpNWn3U5M6zjyjL69BpjSHNYWSMdO+UDP54Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1d:71:ce:74:c7:ed:97:eb:35:84:b9:4f:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=3f918961c405a4e450dd170435fb7f914854a510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:63:da:5f:82:75:cd:c6:67:4c:97:97:81:c9:
27:e9:0b:ee:96:f5:16:6f:34:af:11:0f:70:d9:ac:
c3:4c:00:83:5e:86:61:b8:54:56:cc:ea:ed:81:44:
c7:1a:be:3f:35:eb:77:2d:c9:e7:13:34:5a:3e:b9:
44:74:49:45:61:51:5d:89:8f:f9:f8:d0:6c:22:44:
45:8b:84:9f:c5:86:e5:68:3c:92:1b:f2:24:d4:ae:
da:45:07:b1:53:ac:4d:bc:8d:29:a1:c8:10:1a:f4:
27:69:43:74:4b:d0:d4:18:82:5d:40:19:50:fd:78:
8b:c6:80:bf:ac:9d:82:ab:70:ac:14:49:bc:fe:d1:
d2:df:b6:36:5d:49:44:21:2d:e5:24:9b:8a:49:13:
67:f0:ec:d0:a6:40:31:18:39:a3:0c:97:15:6a:34:
6d:bc:90:40:98:1d:6a:43:ac:88:b4:23:1c:d2:d8:
2d:73:b7:47:3e:35:d2:8d:71:b7:a6:fd:98:0b:07:
11:0f:f3:00:d0:0d:bd:54:cb:9c:01:07:1d:d3:4e:
8f:5d:bd:d4:c4:cd:fb:98:7c:88:81:ab:cc:95:d5:
ed:c7:02:be:35:4a:f1:d0:ce:e7:f6:c7:53:30:9e:
b0:33:0d:25:9e:d6:ad:fa:db:8d:d7:6a:7c:0b:4a:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:89:61:C4:05:A4:E4:50:DD:17:04:35:FB:7F:91:48:54:A5:10
X509v3 Authority Key Identifier:
keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:7b:c2:42:8b:68:f7:c5:35:65:63:14:65:46:49:36:0a:
4c:89:35:b1:8a:8c:8b:cd:f5:e3:6e:ec:3a:a5:0e:74:7a:48:
12:a0:6d:73:1e:56:63:1b:8a:95:37:bb:47:f2:60:b0:1f:05:
57:13:5c:e4:c7:b5:50:9c:9c:e5:58:4c:19:bf:25:cc:6a:81:
5f:7e:92:01:c6:89:fa:a3:8c:c6:0b:f0:c7:e3:9b:61:93:a5:
62:a0:ba:b4:57:aa:43:69:9e:8e:db:26:c6:a9:d3:d4:48:8f:
6d:3e:33:f5:c6:9f:92:43:e7:09:95:a5:87:d1:04:6c:80:5d:
49:63:04:50:2c:fa:43:7d:8a:a9:8d:6f:a2:1e:47:71:0f:12:
fc:cb:e2:79:8d:a9:db:ec:d6:08:23:03:60:fa:40:a1:d6:fe:
6a:ad:39:83:50:fb:a6:88:fe:cf:90:2a:c6:eb:66:62:fb:8f:
a4:f2:38:0f:6c:b0:d5:24:30:95:1e:fb:01:67:e0:3b:52:4e:
e1:28:99:37:b3:34:2e:ac:d3:6c:c3:a0:79:6b:d0:79:60:94:
5f:65:2e:19:bd:78:15:dd:2c:39:af:23:71:69:27:e7:71:73:
5b:c4:ad:36:de:39:72:06:89:44:cc:62:9e:68:0a:60:15:fc:
75:20:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:50 2025 by rpki-client