Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: i8zRm7eDWAC5VGPyd+nSePWA9i2WJbWpLId02d4o5fQ=
Subject key identifier: 66:71:5F:0D:7D:47:90:F2:60:92:CE:69:A0:DF:68:BC:30:B5:BD:C3
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 0199FC2187AB1363C17EC01804E373CCC569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0F56
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: pivZ85TS1m7Kxgof8NxvpN21neVoJ3Vfi8q9yGjFfHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:87:ab:13:63:c1:7e:c0:18:04:e3:73:cc:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=66715f0d7d4790f26092ce69a0df68bc30b5bdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:ec:ad:38:69:f8:ea:01:62:57:d6:33:69:
63:f0:19:a5:58:2d:4c:cd:4b:0e:8a:e3:41:9e:7b:
58:9c:5e:c6:c4:23:0c:06:06:3d:89:35:9f:84:7b:
02:48:62:9e:2b:89:5f:df:37:58:51:5b:03:36:0e:
10:c1:07:41:0b:01:30:02:ff:f2:00:0f:e4:e0:c9:
53:5b:72:c6:52:e7:1a:d1:11:6f:81:e5:2c:99:9f:
34:63:5d:c6:8c:65:4e:1c:fd:83:2c:5a:c7:6b:c3:
90:1e:f0:c3:ea:04:b2:70:71:e4:7a:a2:a8:28:29:
02:51:ae:1d:b3:87:f7:3a:97:c7:4e:b3:16:0c:b7:
90:b5:fa:c7:22:58:a0:fb:d4:6a:2f:52:16:46:ee:
03:3d:98:70:fc:c7:ac:5c:73:6c:b8:8e:12:39:64:
4a:79:65:b9:a4:a3:85:2a:67:16:ea:ce:94:f1:4d:
6b:75:29:f3:5a:cf:f8:4e:3a:b6:e5:bd:64:bf:75:
0f:6b:da:66:ba:41:44:93:72:06:45:ce:63:5c:46:
69:e0:1b:e2:cc:c6:c9:82:4a:88:e5:6e:70:6b:18:
f4:ad:ee:e9:89:68:ef:29:a1:7a:d7:b8:50:89:c9:
ae:58:29:d1:d1:f7:2b:0e:b0:33:91:7d:1f:53:08:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:5F:0D:7D:47:90:F2:60:92:CE:69:A0:DF:68:BC:30:B5:BD:C3
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:82:a3:09:ec:85:47:bc:23:83:9f:00:43:be:56:09:50:ad:
f7:65:09:35:26:10:c3:18:ce:ff:08:53:45:73:96:b9:29:7e:
7b:38:e3:d9:8b:ba:dd:9d:72:b0:83:5f:c1:52:7b:74:51:02:
08:d9:1e:01:7c:07:4f:8d:81:ab:7d:67:9c:b5:0e:f7:30:bb:
31:e3:aa:7c:fd:86:1c:e5:8a:64:86:fb:e6:c7:84:c8:51:08:
51:9c:62:f7:88:83:d9:a9:c3:fa:65:7c:54:91:be:c5:c7:92:
8f:95:24:67:b3:76:81:18:1c:b3:f3:a7:ea:43:3c:85:24:0c:
db:bb:22:98:c9:09:b1:6d:35:14:48:b4:99:fc:ac:40:32:bc:
8a:ae:9f:a0:da:1e:0d:e8:0c:24:03:ec:8e:09:69:db:40:ea:
7a:59:df:f2:fa:ec:11:d4:39:ff:20:e0:cc:04:48:cf:80:a4:
27:a7:bd:2e:65:e9:e4:1b:cb:28:a2:59:a4:de:60:65:ae:64:
89:cc:75:32:cb:1e:fd:d4:d5:d3:6c:24:ea:1f:09:8d:df:3f:
97:4f:cb:34:45:87:ce:d5:32:14:f8:81:a5:cf:f6:38:95:a9:
74:18:af:9f:52:ef:d6:45:30:b5:a0:8c:a8:4f:30:05:e9:31:
70:de:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:36 2025 by rpki-client