Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: gGCBp/eM+Ytl+pXJ9IbMRJDZ0hd8HBEDlCfPfmhjgH0=
Subject key identifier: 00:6D:0C:58:53:B5:95:E4:0B:68:C9:B5:DF:89:26:18:0F:7B:6C:C8
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0199FCC6A5D1473629FBFE39A3CE79DDBE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 0676
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: BQQS/F0aMqKp9F0nmRqnIo+5cPo625HrP+N5kzSjdbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a5:d1:47:36:29:fb:fe:39:a3:ce:79:dd:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=006d0c5853b595e40b68c9b5df8926180f7b6cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:90:87:61:70:19:1b:f5:64:75:bb:83:b5:
26:45:17:8b:af:ac:72:aa:04:5f:39:56:05:31:8c:
29:e2:04:f5:88:f9:09:93:4d:1f:72:0d:ab:1e:ca:
51:39:38:dc:69:cc:90:26:de:09:2d:47:b1:93:3f:
81:22:b6:eb:5e:c2:67:60:ff:fa:a8:2f:45:37:76:
00:15:16:3c:a2:e1:89:e3:78:dc:b6:0e:70:11:01:
fa:61:17:fa:d6:2e:8a:78:fc:2b:6a:ff:17:17:fe:
d9:ca:3a:14:98:c5:34:34:0c:78:79:53:b0:d2:7e:
54:d1:e9:85:3b:f5:f8:24:dc:9a:6e:55:42:e8:af:
86:fb:25:69:7c:47:82:e3:74:a0:3c:7f:15:a6:bb:
6c:84:1d:0b:43:13:82:55:49:4f:44:40:7f:25:d7:
c2:87:5e:2a:28:3c:ef:5b:d9:81:9c:94:68:4c:59:
c6:91:73:f8:c5:cc:05:ed:52:f9:04:f7:5f:0e:04:
69:b9:16:6b:f5:63:67:9e:36:63:41:5a:59:f5:00:
7a:a5:f4:d7:3a:2d:8f:ef:de:5a:7d:d3:8e:61:70:
41:a4:89:8e:13:b7:8b:ee:a1:4a:24:5c:a4:f0:59:
48:29:a7:10:3d:d3:ed:f4:5f:34:2a:be:74:67:6f:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:0C:58:53:B5:95:E4:0B:68:C9:B5:DF:89:26:18:0F:7B:6C:C8
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:f5:b7:f5:f8:30:de:55:e1:83:ed:21:7c:5f:4b:e0:e9:
34:f4:67:b7:0b:18:ff:76:8b:63:f7:0c:b3:01:13:5d:9d:d4:
36:c3:e1:b2:04:56:ee:c0:8d:ee:fe:f8:ff:9e:96:e6:10:dd:
c1:b4:bf:46:9a:7a:92:e0:e6:f8:8a:5c:e2:c9:c2:d1:c5:94:
d8:b4:bd:e0:0d:bc:fa:2d:e6:72:38:d1:e4:4a:a7:7e:9a:20:
5f:19:08:89:30:a1:b7:8a:89:bf:76:36:8e:02:9c:e3:90:10:
e1:f1:9e:ad:2f:3d:54:4f:84:a4:25:aa:c0:88:86:a5:e9:b7:
31:3c:35:2b:9a:2b:07:e4:51:23:c5:59:8c:7b:76:a2:84:32:
54:04:6a:9b:32:3a:b5:67:b3:18:df:c5:0a:df:18:9e:1b:46:
d4:a7:64:8a:6f:54:fb:8f:ad:51:c7:80:96:7a:a6:b5:73:31:
41:8b:f3:db:c4:1a:ed:77:d8:83:69:f1:fc:aa:4c:11:54:63:
be:ea:69:3d:1c:6c:42:97:5e:4e:c7:55:90:8f:eb:7a:12:2c:
41:af:af:b7:6d:b0:09:e5:d4:0e:92:77:b0:5e:11:bf:04:0d:
ce:30:d5:15:ac:48:f9:ed:7b:2c:28:6b:08:6b:cd:ca:fd:e9:
2f:2d:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:08 2025 by rpki-client