Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: TTGMi44VpPfwNnU/AN1CewzjwN82BF9it8ApKo9Z8nE=
Subject key identifier: 99:FA:C2:65:E2:50:E8:FA:3E:6E:1B:23:CF:E9:12:0E:51:D3:53:E5
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0199FBEA7424EE12CFABCD0B6F0F694450F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0EE3
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: YpKdibAFd+KYSn5M7CPctGCdmSq61Vmk2jv3Qcdhz2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:74:24:ee:12:cf:ab:cd:0b:6f:0f:69:44:50:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=99fac265e250e8fa3e6e1b23cfe9120e51d353e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:c8:80:f7:07:54:25:fa:74:02:88:4f:63:
68:dc:77:35:3f:1d:0f:c0:3e:14:b3:35:cf:51:a3:
22:aa:34:08:9e:91:71:59:11:8a:c9:6b:2c:6a:17:
57:f5:4e:a8:c1:72:d8:17:18:c7:c7:c0:5c:cb:7b:
0b:9f:24:b1:de:95:4b:24:38:e6:a6:b4:03:f7:19:
08:d5:05:57:15:68:95:0d:ba:9b:d5:d8:3a:6e:22:
d7:0a:e4:1a:b6:8c:d1:1a:7e:e2:d4:5c:41:d9:a8:
44:8d:31:57:c7:5c:ea:ea:be:a9:ab:90:b6:ea:23:
cc:d7:d8:9a:df:12:ba:97:82:6a:c8:ff:84:75:3b:
e9:bd:7b:f6:e5:c6:f2:07:c7:7b:20:8a:6e:f3:0b:
2b:65:32:b7:95:b5:61:9b:38:e6:ee:0d:92:1c:80:
50:68:bf:9a:ac:4e:c1:2f:89:e4:af:f3:df:c7:ec:
ef:72:da:3c:94:f5:e2:af:43:a5:bb:f3:ac:a3:a9:
5c:8a:a4:58:d4:fa:35:35:82:ea:dd:41:bf:1d:99:
92:ae:b5:4c:87:9b:dc:54:07:ba:89:bf:f1:b0:d9:
a4:4e:ac:f4:fe:ef:75:a1:49:94:36:c7:28:ec:33:
f3:ee:c1:5d:86:62:62:c4:89:d2:07:74:9f:3e:59:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:C2:65:E2:50:E8:FA:3E:6E:1B:23:CF:E9:12:0E:51:D3:53:E5
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:1f:c1:bc:11:10:06:ec:e7:ae:ee:e4:0a:7a:23:54:c7:
0d:37:fe:cb:31:95:13:4c:b1:83:fc:98:4b:64:c0:ff:ee:79:
0b:8d:75:23:4f:73:80:cb:2c:46:93:e3:eb:ed:43:3a:3d:04:
fe:84:f5:4e:87:dc:8e:ec:52:68:b9:03:40:b7:4e:be:a5:53:
75:21:76:25:9c:54:88:7e:da:fc:26:e7:e8:86:e5:70:97:4e:
21:45:7e:04:23:ba:15:7f:38:95:5a:c7:17:c7:ca:52:66:7f:
99:e7:03:ee:8a:b5:38:44:56:84:fe:6e:3c:2a:f4:fd:bb:fa:
4d:8b:ae:11:5b:b8:e6:7d:5f:02:c2:ab:ec:d4:ac:ed:a7:50:
35:f1:45:ef:33:84:61:1a:f1:8b:48:0f:08:ee:e6:08:6f:1c:
4a:88:50:e5:d8:0b:c1:56:63:b9:39:2e:bf:95:ec:f7:c0:f7:
eb:ef:2f:84:ab:cf:b2:e5:8e:65:fb:7c:56:ec:7a:87:5a:b7:
00:79:2b:2e:82:89:16:20:ad:4a:96:13:0d:a5:e5:41:23:dd:
81:9f:74:1f:95:ff:39:78:8b:e1:7c:17:3a:8c:b9:24:f2:18:
6b:75:f5:ba:7e:bb:25:59:20:62:5c:e2:2d:75:a7:ff:85:58:
46:bf:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:02 2025 by rpki-client