Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: SJDWjr0vfGiPHkCXYdaSl7xQU1rGiO5LgfBGH2AjFrc=
Subject key identifier: 0D:87:8F:3B:9C:7E:40:6C:A5:CA:2A:0C:18:12:F8:7B:E3:8F:B1:D4
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 0199FCFD722716B13DE9DE83CF5122D22159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0D75
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: kt0i5aZLY9j3mbqEtuvZizTEILenYHk2eN7Ygc1ds5o=)
2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:72:27:16:b1:3d:e9:de:83:cf:51:22:d2:21:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=0d878f3b9c7e406ca5ca2a0c1812f87be38fb1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:bc:a3:64:07:2e:d4:10:0e:11:04:c3:65:
03:6d:17:4c:50:6b:70:33:58:54:53:0c:74:e3:bb:
92:08:65:eb:fd:05:e3:50:c2:22:8b:36:c2:38:e5:
b0:7e:b5:40:8d:fc:f5:69:8c:ab:b1:1c:e0:b0:bb:
1b:da:2f:3c:0d:a0:83:13:87:7c:51:e9:32:df:f5:
cf:37:42:3f:69:9c:4b:98:50:55:9c:22:15:5a:d7:
21:d6:aa:24:ba:77:d9:30:67:9a:f4:36:5e:d0:f2:
cb:63:74:6e:63:44:43:8f:da:a7:3e:a2:34:f8:0d:
d1:cd:ab:ae:8e:ac:1d:37:1d:0c:0c:91:1d:2c:bf:
4a:49:34:fb:ce:4a:5d:a6:ab:58:1b:26:06:db:90:
69:7f:f6:3c:b0:22:4a:36:3e:22:22:c7:42:20:75:
f9:dd:a1:a0:01:df:23:ea:ad:99:fe:12:a8:b6:a0:
c9:a1:b2:50:75:a5:a1:81:26:38:19:fb:c8:e2:25:
0b:22:df:10:2f:7f:7a:1f:fe:c2:69:3e:ac:99:20:
f4:c9:ef:7d:7c:aa:55:cb:b8:a8:90:c8:67:78:46:
3d:bc:38:c5:98:5d:b1:51:69:c5:a9:9a:1b:c6:d9:
48:37:6c:64:c4:a2:77:72:e4:2c:d4:da:af:51:22:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:8F:3B:9C:7E:40:6C:A5:CA:2A:0C:18:12:F8:7B:E3:8F:B1:D4
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:ae:89:28:df:54:00:9e:79:21:0a:df:53:84:34:b1:34:
d3:79:e0:94:ed:06:b3:9a:03:f5:60:e9:c3:a1:04:31:18:8d:
78:f5:9b:59:72:a9:30:35:dc:74:88:ec:33:23:f4:9a:6e:8d:
d5:65:ea:4d:15:68:01:34:c8:00:97:3c:a8:80:2e:e2:83:bc:
4d:13:f3:97:24:df:c9:1c:49:79:3c:75:6e:75:17:52:76:de:
76:12:de:d1:d1:a8:3d:cb:80:75:17:64:48:d9:7b:9c:99:ed:
ac:dd:e6:2b:38:b1:57:cb:44:b2:16:c1:7d:03:f5:a2:df:1b:
94:e0:97:ec:ad:c7:2f:d6:e1:ff:7c:bd:d8:43:19:09:a9:36:
68:0b:96:9c:91:6d:0c:97:66:ec:06:29:06:ce:cb:18:32:31:
09:c1:84:56:c6:89:73:4a:d5:a6:5b:90:75:d9:56:fb:9a:15:
33:aa:53:a9:53:36:79:1d:59:b2:4c:44:6d:5e:de:d4:29:d9:
bf:14:5a:a7:56:9c:d8:2b:69:32:38:fc:96:c4:46:30:1d:e6:
5f:6e:7c:c8:99:1a:d8:cd:95:00:9b:c7:bd:fe:9e:ae:0b:64:
89:6f:7a:7e:bb:bf:24:fb:90:4d:71:f0:3d:9d:be:2b:df:ad:
ed:05:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:47 2025 by rpki-client