Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: DtQ35tEJMwm8NQjl1Cw4tj9j+p94UV3hJjfOnMDazs4=
Subject key identifier: 0C:B5:11:41:35:D9:6E:D5:37:20:60:79:EA:AF:84:48:CA:3F:DE:B3
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0199FCFD8B90EA62BC23BB3004B6C9A64B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0305
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 9zD/e/DWcJvCpuC3i7NvNDjKoQ0+O21pP49uPawY68E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8b:90:ea:62:bc:23:bb:30:04:b6:c9:a6:4b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=0cb5114135d96ed537206079eaaf8448ca3fdeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:04:c6:89:43:0d:3d:4f:79:b5:8f:94:06:
2c:30:96:30:7e:34:a9:5e:a2:67:a9:f3:2c:32:0c:
90:2c:d5:84:c7:d4:e2:ea:66:46:4d:1a:86:be:b4:
bb:0e:c2:ec:cd:bb:80:07:48:2f:3a:43:cc:bb:13:
7e:0d:df:d6:5b:08:34:d5:fd:19:c1:09:bc:51:23:
e3:6e:dd:8c:68:3f:97:26:34:ca:22:3f:41:5a:83:
a2:01:8a:03:34:4d:bf:99:4b:4a:75:ba:7b:f4:8a:
92:4a:3e:87:ff:52:31:1e:20:d3:55:df:6f:c1:8a:
35:d7:cb:d9:1d:04:31:48:23:49:5f:77:3b:5d:31:
05:fb:36:ab:ff:55:f9:7e:3c:9e:4e:f0:52:76:18:
e6:23:a4:6f:d3:bb:40:4e:51:88:ed:08:18:ac:c4:
81:c1:d9:79:86:b0:46:98:94:de:26:f8:e5:28:4a:
60:88:e8:fb:08:29:0c:11:a7:93:0e:11:ae:39:83:
b8:1d:44:cf:ba:70:bf:25:6d:05:a8:b0:cb:10:fc:
82:b1:5a:25:8b:ca:be:1f:ac:66:39:95:6d:28:9a:
b8:37:f5:d9:3a:f2:81:98:d2:ce:28:60:26:e5:6e:
3a:83:8d:75:ef:84:11:b4:3f:be:26:b3:5d:c6:9f:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:11:41:35:D9:6E:D5:37:20:60:79:EA:AF:84:48:CA:3F:DE:B3
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:d2:c0:b2:15:45:c8:00:31:53:85:43:6f:dd:39:86:a5:
62:f0:e5:57:1b:a6:88:1f:83:3e:81:02:ec:58:c0:0d:98:8a:
47:4e:4d:9c:55:ce:08:b4:a4:2d:ce:61:0c:3a:55:20:53:21:
fb:7d:da:db:04:97:a9:39:0a:5b:95:5e:17:f6:b2:f4:ae:1b:
bf:4f:6f:5f:3b:b8:1d:99:55:d7:db:ab:11:28:d4:8d:f6:d3:
f7:3e:3a:e5:29:90:9b:b2:74:e5:aa:21:0f:0c:18:18:95:b5:
45:4e:de:bb:21:73:76:34:d8:20:e0:df:13:14:83:7d:62:6c:
df:75:ff:34:f5:1e:22:91:4c:68:9b:d0:e6:62:50:13:a4:86:
2a:aa:ec:74:16:f6:70:79:26:31:02:86:50:d2:0e:9c:32:15:
32:b6:50:01:f5:52:08:ca:e9:94:6d:3b:16:6a:4a:bc:72:b3:
fb:53:9a:2f:8a:f0:5a:53:ed:99:71:07:bf:ca:9f:66:d4:e9:
84:41:b7:9b:fe:da:34:d0:70:d8:a5:de:e0:2d:12:e7:97:64:
65:af:b5:49:45:94:35:7d:59:06:f1:45:f8:7b:75:dd:b1:4d:
f1:f6:ba:f4:7b:59:7f:d4:7f:a5:4f:8c:00:e7:e6:a3:d3:2b:
d5:fa:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:05 2025 by rpki-client