Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: ihBVBgvhhkHNs6BtPHvps+EvBiakdQSg0nq/j1wAOJI=
Subject key identifier: E1:E2:A5:3C:59:63:F7:05:1D:7A:EF:E7:A4:E6:4A:AA:73:24:A1:80
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 0199FC8F80010ECE7C24C8487165E6A38429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: C1
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 38R6j4WZRDh7lxPPfaHYnBOsF1k.roa (hash: pi9e0CEvNyyq1XO56Ym08oOogdD/KO/PuJZczLywo88=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: yY/WTH99gBK1ISu7SXOd92j5uoPl6f1TIKDg22fhMl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:80:01:0e:ce:7c:24:c8:48:71:65:e6:a3:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=e1e2a53c5963f7051d7aefe7a4e64aaa7324a180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:bc:50:5f:91:83:ca:ef:a4:3a:d6:fc:15:
f1:70:50:60:67:0e:ac:34:7e:25:1a:f4:62:48:af:
d4:45:1d:67:ea:bd:d7:e7:e9:0e:9b:93:3b:07:65:
bf:76:2d:51:4e:59:a1:29:5e:3b:5f:eb:c4:18:f3:
92:3e:72:06:ae:fd:ca:1a:2b:df:f7:df:64:ca:9b:
c7:00:f2:49:69:a8:9f:d3:ec:0f:1f:f5:25:1a:56:
a5:1d:a4:8e:f3:19:c4:66:60:88:2b:7a:09:9a:c8:
a4:8c:84:6f:cc:c2:a9:de:cf:ce:bf:90:7b:5e:9a:
af:d0:e9:da:eb:8c:6e:8a:06:ef:61:d3:3a:be:58:
54:f9:84:a4:50:95:3b:65:cf:4c:84:6d:e1:44:52:
f5:bd:99:1d:17:29:10:74:46:9c:e1:96:d7:27:c6:
5d:8c:0b:4c:ad:70:7c:49:22:ca:69:9a:15:6f:b2:
b6:9f:5b:55:15:99:de:c3:56:bb:8c:0e:39:b1:07:
76:4d:55:36:60:2f:1c:a2:9c:87:f3:d3:94:ea:73:
38:f4:18:dd:fa:e2:b9:80:74:b9:66:0e:dd:97:04:
c6:8d:01:6b:ff:1a:d5:b1:6f:99:1c:32:bd:4d:1c:
31:03:4e:a7:63:97:66:6c:df:29:15:9c:11:1c:f9:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:A5:3C:59:63:F7:05:1D:7A:EF:E7:A4:E6:4A:AA:73:24:A1:80
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0f:7c:7c:bc:db:9e:8d:74:d5:79:78:81:da:ad:0a:8b:17:
a6:37:8c:12:36:1a:11:8b:88:1c:da:3a:74:f0:d2:d6:75:89:
07:16:f8:6e:72:95:e1:6e:2d:a3:04:58:86:0b:88:5d:8e:69:
3e:19:19:99:66:12:4f:c7:b6:35:e5:4e:79:42:e4:a4:f9:d5:
32:f9:2d:12:b8:e3:89:e7:c3:cb:a2:3c:65:89:37:c1:95:38:
19:cd:7f:2f:8d:4c:b0:aa:01:72:f8:b9:be:1b:8f:41:12:73:
25:cd:68:15:e0:16:35:5c:9a:dd:ef:fb:71:a3:85:fd:28:3e:
d0:39:ee:05:80:ad:46:df:9e:61:63:fe:3a:25:00:5e:74:c1:
82:c2:a9:45:32:0c:55:43:fc:7a:27:63:75:36:5d:63:f4:fe:
17:92:84:8a:2a:bd:fc:73:36:ef:52:dc:5c:4e:90:17:2c:11:
f3:50:a8:b8:5d:40:3c:94:17:82:2c:a4:80:7a:10:85:20:bc:
00:ce:38:eb:5d:4f:a1:aa:31:03:23:33:e2:f1:26:3f:cf:45:
33:29:44:9e:1d:65:fa:fe:2f:4a:48:61:30:11:6e:6b:88:25:
6c:26:4a:c5:21:42:70:a6:3c:61:d5:16:9c:74:5f:4a:fa:78:
14:0a:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:34 2025 by rpki-client