Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: hrnMG7VtM9hglMAwRQnR/AhXf2L08tbffbJtjePrjsU=
Subject key identifier: 23:22:0C:FB:97:F3:66:B1:5A:2B:FE:8C:92:AA:E1:7E:83:A3:C6:56
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0199FD6B10A061F878FBE3C9A04E63D13384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0B4D
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: 30XReKkFE6b37vMSXK8zTd3g8U8hbCHn9xNoSFo/BPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:10:a0:61:f8:78:fb:e3:c9:a0:4e:63:d1:33:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=23220cfb97f366b15a2bfe8c92aae17e83a3c656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:29:8b:79:59:e1:fb:06:bf:88:81:bc:45:
cb:ba:e9:eb:37:d3:bd:88:b3:9c:58:05:4c:cb:26:
ed:d7:52:b4:44:3a:5a:bd:55:95:f2:9b:9c:36:b6:
bc:f5:bc:66:14:7e:68:17:4f:57:01:1d:42:b7:cd:
fe:b8:5a:55:2f:4c:c2:68:73:f6:b7:de:6e:91:0b:
50:37:83:b3:54:82:e7:68:06:8d:b9:7b:c3:f0:00:
e2:39:ac:b8:6f:ad:0e:07:6f:d0:4e:c7:54:6c:0b:
ab:b9:91:b8:51:a7:9f:3e:62:c7:75:0f:e5:4a:8e:
2e:19:e1:0b:d5:65:9f:14:cb:8b:37:00:4e:31:99:
c7:ed:6a:ba:f0:03:be:19:92:9e:bd:11:46:db:99:
85:4b:99:13:dd:f5:63:99:ae:29:8d:5d:84:59:df:
c4:4f:08:90:2d:c7:d3:28:df:6a:84:e0:72:f9:c7:
58:10:f2:94:c1:75:fd:92:5e:51:f9:04:df:21:70:
5e:78:c1:8f:72:30:89:3b:4c:84:f1:fd:f2:4e:f4:
47:c1:d3:ed:23:57:82:56:b4:66:4c:15:0d:bd:03:
01:81:4a:a5:c5:e5:ed:81:52:ae:e8:8b:99:89:66:
9b:53:85:47:57:11:78:6f:89:8b:36:b5:a5:6b:c0:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:0C:FB:97:F3:66:B1:5A:2B:FE:8C:92:AA:E1:7E:83:A3:C6:56
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:12:4c:5d:d0:81:26:03:0c:06:9e:49:0d:aa:1d:b8:0a:
c1:09:36:3c:cc:5f:d7:33:28:68:9a:e2:37:38:11:f3:1b:74:
52:13:7c:0a:86:b7:b7:e8:80:f8:eb:63:0a:fc:20:bc:11:b3:
da:92:14:00:06:1d:73:48:81:82:00:3f:b4:b0:d6:66:d1:4f:
76:0c:a0:2a:49:83:15:0a:94:0d:d5:08:19:38:1c:98:c0:ab:
e1:99:1b:08:c9:b3:34:cf:c8:96:2e:5a:01:04:25:59:94:89:
a0:c1:a8:87:52:10:4c:fa:7e:a9:3a:39:8b:1a:96:08:fc:a5:
03:fc:aa:67:1e:fc:f0:07:a5:40:08:6b:99:4c:2a:43:90:36:
18:fe:b0:d2:8a:4f:9f:fe:90:05:ce:81:84:fa:64:4e:4e:5f:
ee:2a:29:75:aa:b2:c9:7b:9e:ad:3a:92:c9:d0:03:8c:78:b2:
cf:cb:76:09:b3:34:6b:59:41:af:c1:62:1c:eb:06:c8:45:d3:
89:7c:7e:84:8c:3b:ac:7e:d1:cd:91:da:d8:81:41:e0:6f:c3:
40:65:84:75:ca:66:9a:74:47:00:79:46:3a:92:2c:8e:7e:65:
e5:b7:eb:a8:fc:15:68:11:64:9e:39:fd:91:13:20:bc:cb:42:
ef:f2:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:47 2025 by rpki-client