Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
File: RKMb41sydPLLhX5a81aLaFqJEn0.mft (raw, json)
Hash identifier: 1kaqlF10TZFUww+eg7K/1fJ2VwjWY8zJEE3gm29OV6I=
Subject key identifier: 44:18:90:A1:8E:FE:37:3D:64:2B:AF:78:69:08:8D:80:E9:3C:95:82
Authority key identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
Certificate issuer: /CN=44a31be35b3274f2cb857e5af3568b685a89127d
Certificate serial: 0199FD6B4EE075241C223C65CB3F53E32CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: RKMb41sydPLLhX5a81aLaFqJEn0.crl (hash: eWyjAPNaII/0IyOUx3nQZ1dG2cNUkRsyUI3GMDIXMBg=)
2: YFJicIZOsKffrZlgqGfXDM6-Vko.roa (hash: clBAf9+wIJJTmEssFM2b37Ghk44VkYVJfz08MTSBlTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4e:e0:75:24:1c:22:3c:65:cb:3f:53:e3:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a31be35b3274f2cb857e5af3568b685a89127d
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=441890a18efe373d642baf7869088d80e93c9582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:27:2d:6f:d7:2d:b3:33:a2:6f:93:48:05:
f3:36:bc:3b:d6:c4:ea:2b:3b:f3:90:89:d8:9d:ce:
0d:ac:b8:58:29:8c:71:1e:3a:38:27:1f:a3:6e:57:
9f:ca:1b:96:de:29:4a:bd:eb:21:0f:f2:54:c1:ec:
13:d4:9f:67:90:18:3e:d1:c3:cf:a2:1d:54:2e:12:
91:25:1a:b1:41:a8:4a:b8:22:25:9f:57:2a:ad:1f:
43:78:b6:b1:3f:27:a8:be:60:da:d5:59:31:d7:60:
42:46:cd:3a:64:1d:91:ab:ef:97:a4:58:9a:b5:40:
a2:a9:96:a8:f7:ce:b9:5f:cd:a4:71:cd:4e:85:92:
25:72:94:03:8c:46:ba:b2:39:01:e3:39:95:39:0e:
14:3f:06:5e:1e:15:cc:2d:e6:06:e2:8d:58:dd:c4:
0a:13:4e:b4:48:bb:6d:d3:a4:b3:05:b7:19:77:01:
a7:55:2e:df:9a:22:53:10:75:3e:85:f8:3f:3c:61:
2b:10:e0:0e:0e:14:df:98:77:93:d0:7b:d0:fa:a5:
85:33:e3:8f:61:88:a4:19:be:4e:0c:a6:ff:d4:46:
a4:dc:f0:bb:6e:53:23:1c:7e:54:cf:94:8a:79:1e:
90:0d:15:46:71:eb:84:a2:ea:b0:c6:d8:c6:38:91:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:90:A1:8E:FE:37:3D:64:2B:AF:78:69:08:8D:80:E9:3C:95:82
X509v3 Authority Key Identifier:
keyid:44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:30:c5:12:80:90:6c:4e:69:a1:91:6b:75:a3:eb:f1:be:
b7:f1:a8:e8:bc:fa:f4:0f:90:02:4d:4d:8c:ca:f0:c2:6f:27:
be:31:bc:84:6d:05:35:d0:4e:5d:a3:b8:c2:d3:d8:60:b3:5f:
7f:86:a1:30:01:0b:84:13:56:70:66:a7:01:b0:cf:a5:f0:ae:
b9:dd:85:10:72:f1:44:10:7c:8d:0f:9d:85:c2:57:fe:d0:ac:
a2:7a:98:90:ec:95:e1:98:2c:87:e6:2d:9a:57:34:2b:77:57:
74:6e:c4:61:98:2d:ed:6d:ec:63:71:36:1c:e9:77:6e:b3:da:
40:36:b7:13:d6:4f:f7:0b:09:29:c8:a8:34:e6:b4:05:e1:ee:
93:62:01:b4:e0:e9:a1:a2:c5:5b:6a:ed:4e:c9:71:6e:30:2b:
4b:86:31:fe:93:75:d3:1f:a5:a0:4a:76:54:23:1a:e9:d2:f2:
7a:56:2b:c2:ab:54:a3:f9:3d:bc:74:b9:6b:c9:8a:c4:f7:76:
d0:2f:cd:f2:8e:af:4f:dd:3e:76:bd:a9:37:52:27:78:9b:45:
b9:f5:33:fa:4a:a1:8e:76:f5:49:b2:f3:62:94:a3:06:b1:72:
e2:b7:fc:68:e2:07:97:66:79:51:65:a6:d8:c0:05:63:c2:07:
f2:bb:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:36 2025 by rpki-client