Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier: tQuWDwSz1Zvw9bUGZg5ADuBxrqExPU+ugy3kYYv9PwM=
Subject key identifier: A8:7F:71:20:7E:85:FC:C7:87:F9:88:8D:79:97:7F:4E:2D:17:49:C2
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 0199FBEAE2CF8E3EE3E4B8AE207D562F449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=)
2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: L1iv/9bChFJMEb7TiqIYt/yoJ9TTAnd2e6jOXKmUS2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e2:cf:8e:3e:e3:e4:b8:ae:20:7d:56:2f:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=a87f71207e85fcc787f9888d79977f4e2d1749c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:83:68:a5:45:18:31:de:12:ce:c7:09:0f:
4b:d9:39:36:14:f9:86:6b:3a:75:bc:c9:00:7d:9f:
b6:25:2c:39:ac:67:ad:e4:b0:24:82:54:50:4d:89:
2e:a7:da:8d:3e:6f:29:52:24:f1:ff:20:1d:7a:13:
18:3d:e2:df:57:79:4d:70:ed:3f:a9:a7:ff:10:a7:
4d:fa:fe:83:e6:1b:d8:01:61:e8:57:7f:1d:02:3e:
bd:29:21:da:45:c9:b2:4b:9a:f6:b3:1b:a8:c4:1e:
15:f9:6d:04:fe:c3:dd:fb:8f:b2:42:11:ee:1a:04:
07:8f:56:05:36:0e:42:85:3f:a4:bc:c4:b5:ba:0a:
56:b2:95:0f:ae:ba:85:d8:12:ae:fc:cf:9c:1b:45:
96:ae:6d:78:61:f1:aa:b4:85:32:1c:ed:b9:f7:5c:
31:66:6e:87:d7:3c:8e:c4:e0:9b:62:b6:dd:33:c0:
1a:88:d3:93:eb:23:ce:6d:5c:1c:25:f9:83:70:f9:
ff:01:ff:ef:17:73:7c:3a:98:69:95:3e:e6:4c:3e:
27:7f:53:5a:23:20:41:7e:23:e4:70:44:01:d4:91:
09:71:d7:17:0d:00:6b:af:90:ff:54:47:23:24:4d:
e9:95:4d:86:6f:4a:03:62:07:b6:f6:e7:ec:02:1b:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:71:20:7E:85:FC:C7:87:F9:88:8D:79:97:7F:4E:2D:17:49:C2
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f8:1b:17:06:20:de:38:04:d4:f6:48:37:2d:2d:d4:c7:25:
6a:ac:ae:f0:f8:a0:67:27:69:37:5d:05:6e:dd:ee:59:58:b3:
65:53:de:6a:c6:77:05:01:60:96:27:90:5a:65:f4:c8:21:ff:
1c:3f:72:4f:4a:d4:cb:1e:b7:da:62:b6:ca:87:65:dc:e4:35:
00:43:c1:2b:ea:47:24:1a:e6:fb:c7:8c:f7:e6:35:56:5e:7c:
11:a3:f2:02:c6:1a:be:b0:5a:e5:8c:93:62:48:12:a4:fa:3e:
f6:f4:f6:d9:19:62:f9:74:71:a1:26:cc:f2:da:df:04:bd:ec:
cf:70:0e:bb:8d:c4:4b:f4:9d:e0:7c:5b:a1:cd:a8:be:11:fe:
8e:40:93:8f:12:e6:5d:59:54:06:41:ab:5c:98:61:82:ce:b9:
8f:4b:c7:9b:e8:3f:49:6c:39:f1:94:d2:20:34:fa:69:c6:a9:
de:af:69:f2:6d:cb:42:13:93:64:86:94:65:72:29:c8:71:e1:
3d:0e:66:13:24:80:e0:4c:f1:c4:3a:c5:4b:86:2b:f1:4e:91:
25:78:41:07:75:c5:e7:10:b0:d2:be:cd:a1:3c:1b:bb:90:ab:
f8:d8:98:a0:bd:91:7d:bd:f1:c5:25:45:43:11:e0:4c:d5:49:
ae:7a:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:48 2025 by rpki-client