Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: TE53kHqTnrsYMX/lfoaZCF0K+FsSd9ahex/Xfxpgb88=
Subject key identifier: 3C:80:33:9C:5D:92:D0:74:AF:2C:A6:B2:D4:9B:38:6F:4B:66:DF:56
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 0199FEB4CD049B83B2E1216618B6C3A65664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 0207
Signing time: Sun 19 Oct 2025 23:01:25 +0000
Manifest this update: Sun 19 Oct 2025 23:01:25 +0000
Manifest next update: Mon 20 Oct 2025 23:01:25 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: K+ugC1E3PmPP8EQRcsew433o+rBe0zyFx+c3mkj4w2A=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:cd:04:9b:83:b2:e1:21:66:18:b6:c3:a6:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Oct 19 23:01:25 2025 GMT
Not After : Oct 20 23:01:25 2025 GMT
Subject: CN=3c80339c5d92d074af2ca6b2d49b386f4b66df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:11:28:c0:d3:d9:36:f3:69:87:4b:02:eb:
58:17:88:49:79:74:1f:c0:44:30:16:de:68:04:52:
ef:5c:7b:19:6b:92:c8:21:ee:98:a2:00:69:ba:57:
7f:1d:be:f1:15:4f:67:a7:99:ce:21:ff:67:10:37:
62:fd:3c:cc:0a:c0:76:ce:8a:66:a7:d6:72:e3:0b:
cf:e8:60:1c:fc:c1:20:2f:49:6d:04:55:68:28:92:
bc:8b:d6:7b:95:87:f9:ab:a5:58:e0:cd:74:6e:f8:
8e:14:12:96:7e:96:92:ff:ca:53:ee:cd:b0:34:26:
19:d7:75:8f:2a:8c:87:63:af:c2:3c:c8:2c:b8:d8:
96:3d:14:30:2c:5b:cc:b1:3c:79:42:14:52:62:3e:
cf:81:43:8f:0c:0b:65:a7:71:65:5c:23:5b:53:64:
c9:ef:84:a1:57:c6:76:c0:3c:68:9e:1b:70:13:94:
6a:38:32:23:28:fc:02:96:9b:0b:40:9f:37:9d:22:
ee:ae:e3:d9:b6:a9:59:e0:3c:ee:5e:d5:9d:ed:1d:
eb:68:17:e2:ba:7b:28:4f:28:a1:bb:ea:f7:af:0e:
df:82:0d:fd:c3:42:b5:35:49:b3:36:1c:5b:a2:24:
8d:61:d4:48:47:46:e9:37:83:27:13:d0:41:8e:75:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:33:9C:5D:92:D0:74:AF:2C:A6:B2:D4:9B:38:6F:4B:66:DF:56
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:16:ed:96:46:26:46:06:e7:c5:7b:ae:6f:54:48:5b:ea:
60:bb:28:74:7f:8c:9d:68:f8:77:4a:69:20:f4:cf:bf:61:e4:
38:a6:9c:f0:c8:bc:bd:10:41:87:37:b2:17:c2:0f:62:11:6e:
bd:26:70:02:80:f5:94:89:97:18:8c:a3:4a:d3:d2:5e:bd:59:
c6:3f:01:a5:23:b9:46:b8:f2:1f:8e:77:97:d8:bc:0d:9e:59:
16:f5:b9:88:d0:cf:37:b7:72:b2:54:8d:44:6a:0f:b0:c2:d1:
86:ba:8a:54:e4:fb:6b:f5:6c:6c:b1:a9:45:76:20:79:30:22:
95:dd:3b:ab:26:d1:33:5b:47:81:c0:a1:e0:42:bd:b3:11:4f:
2d:f8:1a:53:36:fc:ed:1d:b2:bf:9b:c9:7a:be:c0:27:d1:f2:
7f:7d:7c:64:69:e6:c3:06:45:d1:bb:f2:be:61:8b:64:ba:33:
90:d4:f0:48:64:4a:52:90:94:8f:31:7a:39:08:9a:73:51:ae:
10:db:61:85:78:00:74:ca:1b:b4:3d:81:6b:da:11:b9:a4:e1:
4e:11:a8:a3:55:b3:a7:b9:2a:48:50:38:2a:d6:2c:7a:6a:f9:
75:de:64:ea:19:c6:a9:bc:db:9c:aa:bb:5a:d7:d7:e0:e4:bf:
10:93:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:21:48 2025 by rpki-client