Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: hYYt8vcVfce8KJKqDkVzQt6UJ0WbNNOLhrQpvCPKpdQ=
Subject key identifier: F8:96:6D:74:7A:E1:2A:FA:18:EF:F9:1D:A2:13:48:7C:0B:55:48:33
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 019A03A4236A1E699FD450A28439DF276571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 07CD
Signing time: Mon 20 Oct 2025 22:01:19 +0000
Manifest this update: Mon 20 Oct 2025 22:01:19 +0000
Manifest next update: Tue 21 Oct 2025 22:01:19 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: vV6WvVgTfQf73dBLUKFbiTuzUk+q5LGsijkSArbB990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:23:6a:1e:69:9f:d4:50:a2:84:39:df:27:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Oct 20 22:01:19 2025 GMT
Not After : Oct 21 22:01:19 2025 GMT
Subject: CN=f8966d747ae12afa18eff91da213487c0b554833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:0f:11:69:5d:eb:09:65:d5:3d:60:69:16:
73:16:7a:01:31:55:35:94:9e:3b:c2:7d:f0:28:b5:
a8:11:12:49:34:9a:2a:50:4b:47:23:67:2c:58:46:
c3:a7:6f:50:cb:be:ce:98:80:64:0e:14:8b:59:6d:
11:25:1b:d0:27:36:4d:c8:47:cd:f4:f3:75:49:0b:
33:27:13:f9:58:69:32:06:67:9e:45:16:d3:0b:23:
09:f9:81:e5:48:93:91:bb:0d:3c:b2:48:dd:ed:a2:
aa:c5:00:f8:79:06:e8:1c:a6:fc:99:b7:0a:8d:ec:
3b:7f:f7:f7:d2:fa:02:83:ab:1a:0d:2c:83:8a:23:
c6:78:78:58:06:63:51:0a:9e:48:54:c8:9a:11:9a:
9c:fc:b0:dd:ad:20:b9:41:02:d5:bc:7e:16:ff:35:
c6:59:32:dd:83:ce:73:d7:9c:aa:ef:22:20:23:42:
60:a4:b7:6f:9f:41:6a:8e:c8:c6:54:7d:c7:18:f2:
10:0b:48:97:79:3b:87:08:a1:ef:be:a9:29:38:ba:
fb:86:dd:1d:9c:3d:09:fd:6b:e7:19:e8:68:b2:c3:
03:92:80:17:40:12:91:e9:1f:1f:3b:ca:2a:dc:1c:
19:6c:17:19:d9:8b:51:c9:a2:6a:bc:f1:48:a7:87:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:6D:74:7A:E1:2A:FA:18:EF:F9:1D:A2:13:48:7C:0B:55:48:33
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:d3:53:4b:8b:7f:79:08:c4:e9:8c:17:71:6d:73:32:ed:
cd:e2:cd:91:9e:37:b2:3a:2f:63:1b:55:50:fa:85:f2:cc:70:
3e:79:e9:e4:22:d6:46:b8:29:e7:a6:dc:01:04:7c:18:cf:0b:
8d:3e:38:71:4a:10:0c:45:06:17:00:c8:93:2f:66:da:92:89:
14:ff:57:be:17:15:fa:cd:e7:d5:0c:1b:b9:52:51:ce:9e:58:
b8:5f:1e:45:a9:1f:0e:94:01:de:2d:d4:bb:a6:03:3e:bd:0f:
c1:7a:a7:a0:a5:19:96:0d:7e:d4:1e:dc:9e:24:76:fb:bb:c9:
56:60:4e:f5:54:f5:d6:d5:38:87:11:ba:a7:c1:24:b9:c2:04:
06:0a:a0:ff:d0:47:e3:30:f2:da:fb:9a:bb:89:79:f7:8f:96:
1c:0f:34:7f:58:97:84:c0:10:52:40:8e:5b:50:2d:1c:7a:0a:
0a:e7:6a:ba:94:24:a9:66:2c:84:d0:06:a3:08:94:9d:bd:02:
87:83:43:7f:57:9c:4a:17:d7:9a:6d:36:b9:f3:be:a5:c1:d3:
85:f7:14:2f:38:6f:b5:73:4f:1f:71:ad:85:5b:2d:8d:63:45:
53:fa:d7:a5:3d:99:09:5f:5d:92:c1:47:9a:97:3c:71:3d:c9:
66:7c:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:57 2025 by rpki-client