Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: moHsfEEastXIuHWNc4UY2MbQrS6035Sgnb27thaMVAA=
Subject key identifier: CC:F0:37:EB:3F:6F:C3:90:AC:89:68:34:2B:A0:32:0D:1C:7C:43:15
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 0199FBEB8A3F4762968D2492A15430822C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: KlOddcgoGUgTFYTQUowEiDb0hEuneNXC29Q04U/5QxM=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8a:3f:47:62:96:8d:24:92:a1:54:30:82:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=ccf037eb3f6fc390ac8968342ba0320d1c7c4315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:36:7f:b2:9a:b4:90:97:ec:f8:5c:7d:4d:
39:19:fb:83:41:a8:f5:ad:86:1e:25:6d:2e:3e:cb:
54:86:b6:32:6f:5c:c8:70:f5:ce:df:b5:bc:46:e6:
d9:be:d7:a9:a7:88:e9:69:e9:b3:af:0a:55:75:1d:
f1:f1:aa:43:85:d2:09:82:a0:22:96:88:de:ab:0c:
88:1a:2e:9f:f8:ed:58:ee:0f:0c:a7:6e:d2:8a:58:
c6:3a:a5:7d:e6:2c:b0:52:b0:92:91:a4:2f:28:5a:
71:0b:4e:4d:dc:a6:24:77:99:9a:7e:a2:0c:d2:75:
f8:2b:24:56:e4:87:9c:dd:0c:8d:56:2f:e9:15:fb:
d7:a5:22:8b:46:e1:40:e0:58:a1:92:b7:a9:3c:1d:
2c:54:65:87:ad:7d:73:e6:35:5c:1f:fc:05:1e:f1:
58:30:37:5a:a3:d2:88:bc:8e:26:a6:ae:63:d1:c2:
87:9c:b7:05:e3:b2:a6:e3:24:87:ea:7f:5e:34:d6:
0a:02:7e:c8:03:f8:5a:ad:47:62:5a:90:82:1b:97:
5c:f8:f3:13:81:7a:5a:47:e3:8a:6f:58:93:03:4c:
c0:1d:ae:78:ce:00:50:1e:dc:94:26:08:74:eb:a5:
34:3e:9e:74:24:3d:c1:53:18:a9:27:db:46:fe:57:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:37:EB:3F:6F:C3:90:AC:89:68:34:2B:A0:32:0D:1C:7C:43:15
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:55:62:99:3e:c3:9e:6a:f0:4c:71:7f:1b:6a:9f:ea:cc:
90:53:8b:4f:37:46:50:af:b7:00:80:6e:5a:b8:45:60:5b:25:
5c:ca:b1:1b:0f:e6:c8:1b:09:1d:77:5e:32:31:2b:fe:9f:80:
45:72:7e:82:84:56:8f:48:d8:e2:26:9b:70:9d:c3:f8:5f:d2:
da:4b:66:2f:5c:af:a2:51:28:7c:e6:74:99:c2:92:0d:eb:bd:
d7:43:92:d9:0a:7b:2c:b3:9e:b0:b3:39:98:f4:ed:f9:e8:ed:
4f:73:e8:88:50:2b:e5:a4:be:b8:2d:ba:5b:19:26:07:c8:3d:
02:47:4f:09:5b:19:41:c5:18:19:f0:8f:a9:f1:a6:c0:6b:76:
2b:9f:87:d6:b7:e2:91:6a:d0:e3:58:42:b6:88:eb:8f:be:55:
cc:03:d4:ac:a0:78:7b:10:7f:c1:63:02:cb:5a:72:72:28:bf:
3e:a0:8b:10:ac:62:29:00:8d:97:89:30:25:bb:42:a1:4e:a8:
5a:a2:38:fd:66:88:86:5e:40:bb:d9:75:67:92:f3:5f:5d:ca:
e7:73:5a:55:1f:03:7d:16:bb:06:24:e2:4a:fb:1c:2b:ef:f5:
a4:d4:62:5e:59:46:9e:49:e9:a9:fb:75:7f:5a:04:b1:dc:33:
ec:d1:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:42 2025 by rpki-client