Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: 0jbOpMuzoigvop4WXtyMZn4kVZMGHGPWPCYHDdgvgM8=
Subject key identifier: 7D:ED:0E:14:2C:C6:B6:A5:A8:CD:6D:09:C6:2B:65:71:08:4E:4B:53
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 0199FCFD7D1C21345781D5BAFEDF63F5616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 0618
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: ZBmOjwijwkLZpBQHUNS6ZyJ1Hy9Iz6qMjIFfxSuVyOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7d:1c:21:34:57:81:d5:ba:fe:df:63:f5:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=7ded0e142cc6b6a5a8cd6d09c62b6571084e4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:bc:38:1c:1e:57:09:a4:05:a9:85:41:38:
a2:3b:b3:d2:6e:00:18:3d:c2:48:cc:b0:f7:2b:39:
72:cf:28:7a:8c:ac:8a:a5:ca:a6:0e:5d:49:e5:e4:
e5:34:66:fc:7c:7b:3b:98:d0:c5:67:75:ee:06:a5:
1f:d5:ad:2b:ae:27:5f:65:92:58:49:b8:3c:55:10:
e6:2d:49:f0:59:b2:70:e2:00:3a:9c:bc:eb:7c:3a:
ac:44:5d:33:4a:1b:46:90:8f:13:97:74:43:53:4a:
09:2c:f3:80:16:70:e5:2a:4c:45:2e:c8:89:37:e9:
67:5d:88:84:1f:14:b9:2f:b9:6d:80:d4:d5:91:e8:
86:fb:8d:ce:33:90:31:dc:cb:b4:89:71:bf:9a:8f:
95:52:18:f8:91:e5:9a:cf:d7:cc:15:14:10:24:7e:
35:e9:77:2f:fd:1c:a2:3a:13:61:d4:b0:98:03:ee:
26:43:bb:ab:c1:ba:58:f2:cc:95:70:22:77:1c:0c:
a8:c2:fc:c2:9c:b5:c6:82:1d:09:42:ac:41:08:09:
60:71:c6:07:91:85:ed:67:69:58:ac:e6:3d:9b:f8:
8a:bf:7b:68:2a:ff:5f:d6:28:26:58:47:c6:07:b5:
e6:4a:ca:ba:bd:ab:b1:34:53:d7:31:d8:70:1d:d4:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:0E:14:2C:C6:B6:A5:A8:CD:6D:09:C6:2B:65:71:08:4E:4B:53
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:25:03:d9:5f:ea:e5:65:bc:ce:4a:6e:e5:b8:f9:84:c3:6b:
76:7a:43:3c:72:cb:f6:55:2c:56:b2:cb:2f:e7:94:53:55:38:
50:b6:3e:f4:8e:d7:9a:38:a6:39:5b:93:00:f9:52:b3:56:ac:
1d:e7:4e:c4:3b:94:4d:91:ce:60:1d:d9:4f:f7:71:85:b4:ec:
0b:a2:18:62:6e:6b:c2:3c:28:67:5e:9a:3b:7f:e5:05:13:7f:
a9:a0:bb:3c:17:c3:99:e5:1a:08:3f:65:15:56:36:f4:67:92:
07:78:12:8f:4d:60:c8:80:85:3a:60:e2:2e:7c:96:b5:9d:91:
c8:93:27:c1:25:5b:00:e9:86:35:56:23:db:c8:86:76:06:e6:
e3:0a:d3:9b:64:bf:4d:fe:c6:f1:a8:8e:d3:0f:63:d0:c0:12:
ee:79:84:22:3a:96:40:14:c3:4c:b2:72:47:d3:75:b5:b0:7d:
25:95:c9:7a:4e:53:88:47:bc:37:f8:6b:c1:0e:86:1f:df:e1:
fb:39:64:f2:fb:56:b2:ee:be:e9:03:5b:00:ec:3e:97:63:ca:
64:ee:85:bb:6d:e9:18:a8:bc:c4:a7:4d:a3:91:e2:e4:8b:fc:
6f:0a:df:16:00:d9:07:d6:c3:74:82:24:a0:db:35:4f:00:7d:
4f:4c:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:46 2025 by rpki-client