Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier: V26597SuBa8lpt8ONkQ6OtOO+iZlZzDk0tEFx7yf5ew=
Subject key identifier: 84:D5:F0:08:C6:28:01:2D:62:09:3B:77:69:FC:CA:D4:F9:02:F6:36
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 0199FD33E846699DEE7C1A4411E377382EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number: 0D16
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: 1tdqVsiU1BF6w5IglmZut135I85gch9ejky5Vu+rjU4=)
2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e8:46:69:9d:ee:7c:1a:44:11:e3:77:38:2e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=84d5f008c628012d62093b7769fccad4f902f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:47:cb:3e:51:6e:8b:78:66:0d:50:1c:df:
63:bd:83:67:73:83:37:e3:8e:02:80:75:71:a4:38:
73:65:57:82:ef:e2:86:99:47:9a:f1:62:95:67:f5:
99:86:66:12:18:ab:08:b9:18:a9:e3:01:df:86:3f:
80:2c:37:b7:35:e9:5d:ad:6c:81:2f:cb:7f:7b:f9:
59:00:cb:d1:0b:99:12:ab:60:e8:8c:6e:6a:ce:35:
fd:81:6e:bf:3a:05:9a:6a:98:06:4e:c6:bf:0c:64:
19:a2:eb:6f:f9:0e:83:76:52:6d:eb:8b:04:da:0c:
10:a2:c4:a4:15:fe:77:25:36:0e:a0:fa:95:19:55:
bb:16:5d:13:66:50:e3:08:97:97:f1:89:cc:bf:16:
64:35:be:7d:bc:44:63:88:bc:14:fe:dc:44:50:43:
18:e8:81:67:36:0a:0c:88:5a:ed:77:0c:ae:a7:5a:
e2:88:a5:c4:e3:20:a5:f6:cf:52:e5:8c:40:3d:c5:
fb:41:e4:15:c6:28:53:dc:f0:60:17:d9:c2:d7:6c:
57:cd:cb:4e:4c:23:34:06:6f:d0:3e:77:3e:76:a9:
3b:34:7b:ad:28:9e:3c:04:64:bb:13:70:d6:61:4c:
fb:bb:1b:9d:0f:a3:1f:14:74:4f:e4:ef:a7:1c:73:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:F0:08:C6:28:01:2D:62:09:3B:77:69:FC:CA:D4:F9:02:F6:36
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:47:cb:3b:dd:3f:c1:c5:b1:59:24:0e:d8:e8:a6:dc:be:b2:
46:fd:18:b6:b4:02:d5:fc:80:3f:b9:51:28:34:ee:bd:32:23:
5d:25:3a:f6:c7:3f:c9:41:f8:d9:ba:d4:d7:c1:a2:cf:56:b6:
23:29:6e:d9:8c:03:5f:4b:7c:e8:8c:4f:b1:da:cf:d3:ac:b2:
e0:37:75:07:1d:98:92:83:c3:11:c2:ef:84:22:5d:59:38:23:
fa:63:c1:84:c9:b1:d8:dc:6d:25:e0:23:90:8e:38:a5:27:68:
5a:cb:e2:d5:8d:fd:85:4f:f2:75:7b:d7:7a:16:7c:40:b4:49:
4b:69:aa:cd:87:03:fe:26:12:86:f5:f7:c6:52:d7:bc:1b:c3:
39:b6:bf:9f:a6:08:42:60:f3:80:e9:14:b7:49:d1:1a:f6:52:
af:1f:bd:43:14:c2:c3:b4:fa:32:fd:0f:2a:4b:3c:99:6f:0c:
50:54:e4:42:76:9f:c9:ce:e9:24:f6:c6:a9:1d:0f:d8:a9:85:
c0:79:86:b6:7a:a1:2b:d3:2b:8a:0a:98:70:2e:66:47:65:a2:
7d:04:59:5a:6b:45:74:57:1d:5a:81:b7:27:5f:29:f0:d1:2d:
7a:0a:44:1b:09:d6:f8:41:36:e8:cd:67:c4:b4:ef:4d:28:d4:
3a:14:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:15 2025 by rpki-client