Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: ObDhAiTZ2ynPgxaz6/m1S6Cg44wUkP/reEJ3YHPsLX8=
Subject key identifier: 92:4C:9C:81:66:7E:0C:8D:B4:42:0E:08:C1:70:65:75:71:DA:1B:09
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 0199FD346B072A5BCAE2658E6B7FD8F710AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0DB9
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: Bo4x8rJZ9tP/WnlAK4uv/8u9zKlj3KMeNol3+dPWju4=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6b:07:2a:5b:ca:e2:65:8e:6b:7f:d8:f7:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=924c9c81667e0c8db4420e08c170657571da1b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:b8:42:a3:d3:6c:f1:1e:09:67:e1:4b:6b:
a9:24:4b:d0:a9:15:f7:6b:53:be:a9:f4:48:0d:ca:
5c:9b:f6:68:a5:1b:f5:73:b3:80:a3:8c:83:c3:8f:
f7:c3:7d:92:f8:5b:40:99:6b:37:e5:5c:74:be:1e:
05:a3:fd:bf:77:01:7c:4a:57:a5:58:0e:19:2c:f0:
45:12:83:cc:43:2b:01:99:82:06:94:35:ba:bf:62:
da:d9:80:ed:28:5b:23:27:19:ea:21:5b:72:86:74:
4a:4e:12:f4:07:13:df:94:98:b1:30:51:cf:d0:77:
2f:1b:ad:d5:88:59:a5:74:eb:64:98:2a:f9:9e:b9:
c1:5b:0a:bc:8e:23:5d:32:ac:a3:cd:df:fc:41:08:
72:9c:2e:67:92:1e:a5:d1:ff:6b:f1:51:6e:84:4e:
80:25:fd:56:9f:c1:b8:2a:cd:5e:bf:1d:93:da:9d:
8a:6b:02:fc:f4:3e:43:94:e6:27:9e:f0:8f:3d:34:
61:7e:5a:60:4d:39:03:0c:57:e4:cf:d1:b4:42:a1:
8d:4c:27:d9:a7:aa:61:d3:00:ac:be:7e:27:5e:1a:
48:5a:90:a3:bd:a5:bb:38:41:5c:dc:18:25:3c:b8:
ef:1b:29:cf:89:d9:5d:a6:6f:e9:6b:8f:c6:3e:81:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:9C:81:66:7E:0C:8D:B4:42:0E:08:C1:70:65:75:71:DA:1B:09
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f2:5d:7e:5b:f6:99:20:15:3b:9a:3b:98:d8:69:48:ef:ee:
bf:4c:6f:c0:f0:a8:02:7c:39:3d:b9:da:c6:c6:9d:cb:1a:be:
7a:f8:51:55:3f:2e:37:9a:d7:74:44:00:16:51:e5:74:9d:ec:
96:d7:e6:37:f3:eb:87:6c:af:96:77:65:54:67:60:45:26:a1:
26:d4:a3:f3:c3:08:61:cb:ad:55:1d:1b:59:27:bc:23:7e:d1:
c8:d3:1d:e4:df:ef:44:62:75:a4:08:25:2d:61:1e:12:be:1c:
2d:73:c2:3d:45:14:da:62:51:47:c6:35:07:ca:77:07:58:de:
96:3d:8e:84:20:b3:5b:f8:72:0a:0e:a0:62:33:02:15:64:3f:
4c:72:f3:53:f5:d2:d0:50:a5:b2:dc:03:e2:ec:5e:82:c7:b5:
92:38:b1:a5:54:91:8d:11:f1:f5:35:59:08:e4:c0:2c:fa:ff:
d3:76:93:f9:c6:97:ef:20:5f:f6:e1:c0:dc:db:74:d8:a2:a3:
86:12:b6:19:d3:88:a8:54:d3:eb:9c:13:02:46:1b:e7:9c:df:
9d:9d:e3:75:57:a6:63:c6:c4:d2:72:19:04:06:79:bf:08:03:
da:d3:88:f7:35:d2:cf:2e:de:a1:b0:d0:fe:2c:79:a0:31:0b:
c2:af:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:12 2025 by rpki-client