Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: cjKhFMEtv+4JHlRS67WHvQLtOCKZxKtW2rOjFJ+T9Pg=
Subject key identifier: C0:E5:DA:D7:1C:A1:B0:B7:E1:2E:8C:8A:76:CF:46:9D:96:58:C3:EB
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 0199FD34213719F566E669AF0445ED878635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 14D9
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: lJwaXetK4Z4Fjr7BFdc+Y6y8HYbmf3ER0XW4ktMd3Jk=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:37:19:f5:66:e6:69:af:04:45:ed:87:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=c0e5dad71ca1b0b7e12e8c8a76cf469d9658c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:48:a5:20:78:62:07:e8:71:d9:5c:e7:28:
f5:4d:20:a2:be:e9:50:27:e3:96:7f:93:2e:16:7b:
f7:f7:62:67:82:3a:83:71:71:f8:a7:31:5b:a9:73:
1f:23:14:e4:9c:56:5e:4e:b2:4c:ec:9b:7b:85:10:
26:ae:89:b1:d8:ec:77:ef:cd:df:87:da:5c:a1:e4:
0d:c4:65:5b:bd:94:a3:e4:ca:ea:e1:33:10:a8:82:
03:01:e7:2a:94:fd:f1:f7:9b:ff:7d:16:fe:ce:83:
2b:fd:3d:b2:49:59:41:07:16:9e:0d:04:38:58:d6:
5e:23:b1:cd:25:1d:db:5d:23:87:a4:37:07:a9:5c:
36:1c:08:d7:80:ce:f1:b2:bc:44:c8:d5:60:0a:d6:
00:26:5d:f3:ac:4f:60:24:06:0a:0f:f9:76:08:c1:
bf:72:3e:ab:e9:d7:7f:5a:8b:fd:c6:c7:09:e0:6c:
11:80:ea:36:31:bf:90:c6:13:a0:99:f2:92:9a:4f:
75:7e:22:59:9f:50:e6:c6:89:b8:c7:d7:f3:ef:f9:
f6:a7:e2:26:27:5d:04:b2:53:81:66:fd:10:c9:b5:
99:f2:ec:e7:e0:d8:f8:2c:42:29:44:8d:ea:07:06:
2f:74:61:d5:60:49:b1:04:37:41:b3:cb:e9:96:1b:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:DA:D7:1C:A1:B0:B7:E1:2E:8C:8A:76:CF:46:9D:96:58:C3:EB
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:dd:54:9e:ed:42:a0:d8:3a:a7:8d:bf:e9:8d:79:e0:b2:
70:4c:10:2a:a6:93:38:6f:35:76:a7:60:94:b1:0d:a0:b7:5b:
88:e4:88:37:4e:17:3e:f3:8f:c2:59:5f:6d:01:75:33:ab:c1:
1d:b3:df:48:d8:06:ab:ed:01:b5:7f:d4:6a:d3:32:13:c0:e0:
5d:d8:b7:30:bd:1d:c6:13:c3:0e:c0:e6:1c:59:75:de:f6:65:
2a:47:87:8f:a7:36:38:e9:54:41:6f:7a:b2:c9:6e:b4:77:ab:
9b:49:b6:e2:73:f1:56:10:d3:1a:09:63:f4:f6:ff:8d:19:ba:
c1:85:83:90:e5:b4:61:cd:d5:1b:e3:12:11:e2:4c:94:47:f7:
38:95:66:82:16:17:d0:9c:1f:0f:9e:cd:99:00:c3:fb:6a:5c:
4c:ac:d2:4f:f8:5f:81:be:a2:ed:58:72:df:08:07:2d:a1:84:
13:b2:36:3c:c6:c8:e7:d7:8e:b0:0e:2a:a9:89:a6:d7:aa:a0:
41:c6:1b:5d:8e:1b:c1:a5:2a:90:2f:18:1c:80:c8:55:79:a5:
ab:8e:b9:a9:53:6f:8d:3c:70:56:fc:2f:81:51:94:84:81:4c:
c9:27:ba:96:08:4d:e3:cd:3b:e6:d1:86:2f:2e:72:be:3e:19:
c5:cc:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:01 2025 by rpki-client