Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: +J2ZlCfFSsJ+13d9BtRsmiHrgAbE1xw2Z6q9+169+qg=
Subject key identifier: 6D:20:17:ED:B2:75:2B:22:BE:6E:AF:44:74:BC:94:84:61:4D:00:3A
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 0199FDDA32A754BFA5D6F5DB0A57388D5226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: Rm+LJ6Df1SHEsPD2MphIOZzSf5mrMf3MoF7E58WUxiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:32:a7:54:bf:a5:d6:f5:db:0a:57:38:8d:52:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=6d2017edb2752b22be6eaf4474bc9484614d003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:23:c0:d0:42:bc:a7:11:d3:9b:c2:19:a8:
96:c6:fc:10:ff:60:67:c1:8d:94:60:d9:7a:a8:8e:
a3:e5:90:69:67:08:17:e3:12:8a:36:25:df:7d:46:
68:95:74:98:fc:30:73:a3:34:1d:4e:1d:32:29:93:
d9:27:3f:16:b7:f6:1c:b6:81:8d:ad:99:f1:ef:e5:
d8:05:c3:09:e3:2c:d0:c8:61:09:30:a8:3f:23:35:
0c:cc:7b:0a:1a:df:36:ee:1b:30:a8:4c:89:2a:0f:
53:7a:95:52:f0:8d:d2:68:7c:69:bc:aa:d9:18:3c:
98:77:d4:73:2c:1b:58:90:5d:b6:7b:52:ac:16:89:
01:fe:cd:66:ce:41:50:8b:42:c0:fa:10:84:61:c7:
dc:a4:4a:58:11:7d:9f:11:0b:a0:84:97:a7:3b:36:
2a:eb:f7:f3:62:8b:f5:fa:01:e9:70:e8:5d:a3:d4:
9b:33:b4:d1:0b:6f:4d:ae:55:b9:b6:b8:7a:6a:77:
15:bf:dc:c7:2f:eb:22:31:35:d3:a4:35:db:4b:5d:
b0:db:ff:8d:5e:fe:b2:8a:59:56:a8:8a:60:9b:06:
06:16:72:9f:a4:29:aa:29:2b:ed:35:b3:1a:d1:90:
52:1d:b0:50:f1:7e:06:36:a3:61:2a:c0:4a:5b:bb:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:17:ED:B2:75:2B:22:BE:6E:AF:44:74:BC:94:84:61:4D:00:3A
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:17:57:b4:9a:71:20:4b:56:61:ba:88:e1:68:fb:ac:35:
83:69:49:4d:dd:37:da:ff:65:61:8a:61:92:d5:a5:0f:9a:88:
1e:d7:82:b4:3e:4d:09:18:11:b7:56:2f:40:f1:16:d3:35:aa:
5d:ff:3b:75:9b:00:54:4d:94:83:cb:6b:c1:ad:30:26:91:29:
7c:7b:40:a1:d8:43:fc:12:47:e8:92:db:0f:e1:12:13:4a:00:
a8:d5:78:6a:4f:05:31:ad:9d:49:80:fa:1f:68:c3:d2:c8:b5:
b9:90:41:01:cc:ce:3e:2a:17:db:6d:94:62:06:86:29:c0:33:
f5:ed:6b:14:15:01:d3:3f:9c:fd:c9:ad:9d:1c:37:8c:5c:5e:
c9:1b:f2:cf:bd:d5:f4:9f:c5:63:89:b5:78:85:ce:0b:96:f4:
a3:7d:11:68:71:5f:ea:06:91:0f:70:35:25:54:e5:2e:a0:55:
14:18:b8:e7:36:bc:17:94:f2:75:e8:7e:24:20:79:89:71:93:
40:69:4e:bf:db:79:42:b3:7d:a2:e7:a7:60:6d:d5:15:bf:74:
fe:1f:20:70:2d:f5:ec:30:75:63:2a:4f:27:b5:f6:13:ae:c9:
0d:5a:4c:81:2d:35:5a:94:51:f0:fd:d0:4e:06:de:85:1c:d0:
37:06:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:06 2025 by rpki-client