Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: +frALZ5QiQ06wAfn9c2YodgM8P7zDRjFcfjtV4SbUxY=
Subject key identifier: 01:00:AF:93:48:CA:5A:DD:25:F7:6F:3C:0A:DD:04:09:46:02:FF:BB
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 0199FBEC1C8C7D1C3787A8F023DE69DF1A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: RPlYsyoXpUV+74ycMEEQbeMTsrDQJ5StzW7MjxITxlA=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1c:8c:7d:1c:37:87:a8:f0:23:de:69:df:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=0100af9348ca5add25f76f3c0add04094602ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:d2:da:55:49:a3:ec:1e:b9:d8:cb:eb:c0:
6e:60:20:f6:5c:74:90:01:3a:bc:8d:e7:43:04:40:
32:3f:f3:25:13:31:80:4c:f9:c9:72:68:14:94:3a:
a8:d2:b0:ae:5c:57:19:d2:ee:14:56:00:a8:07:97:
9c:2f:f8:82:55:55:8d:53:31:6d:1d:e2:8c:f4:ff:
dd:c3:18:46:fb:86:e8:fb:d8:68:d4:22:81:49:33:
99:d5:49:a6:15:37:1c:64:37:44:14:5d:72:0e:7d:
db:c5:83:d3:a4:74:b1:c2:bc:e6:4f:2a:b9:0e:a0:
5d:40:bb:a6:09:b5:bf:50:69:5e:d1:90:3b:7f:a8:
95:39:6f:01:f9:47:69:53:69:5f:a2:50:50:37:25:
bc:22:b8:f8:ee:3d:02:34:1e:b4:fc:69:02:33:27:
13:b5:d9:aa:1b:74:b6:be:fb:58:b6:57:10:99:ea:
05:53:c1:69:f1:40:32:9c:3a:58:54:7f:74:c7:de:
4b:32:cc:03:26:2e:93:65:cf:bb:5b:14:1d:ca:a2:
6d:2f:61:ca:21:27:b9:fb:a6:ba:c5:be:52:74:b6:
d8:5d:ca:7d:0a:4a:80:9d:8b:92:9b:7c:28:d0:0b:
0a:b0:30:6a:51:23:58:f0:33:e1:f3:1e:fa:89:a2:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:AF:93:48:CA:5A:DD:25:F7:6F:3C:0A:DD:04:09:46:02:FF:BB
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:c5:2e:8c:c3:6b:0c:fd:e5:f5:ef:09:2e:cb:f9:7e:2b:
d3:6a:ce:06:2a:e3:b8:f3:eb:1e:bb:0f:e9:49:55:93:a3:b6:
35:8e:8b:b3:f0:58:09:39:e4:41:fd:0a:d0:2d:e5:4b:52:23:
8a:3e:8a:3c:22:2b:ca:a6:ab:e5:87:f1:fc:8e:7c:90:41:e2:
50:37:74:7c:cb:4e:32:14:04:aa:b0:dd:29:34:f9:f1:bc:cd:
cc:c8:b7:c4:13:c1:d3:c5:9e:5c:ff:b5:b1:99:a8:28:e6:98:
a9:0e:53:98:9f:23:17:52:3e:c7:d8:09:c4:22:c4:29:14:42:
ff:99:78:fe:76:b0:c4:f4:05:24:2c:14:c0:44:c1:e8:61:66:
de:9a:c9:99:9d:65:a7:81:17:fd:b1:b3:36:ec:51:ff:6c:9b:
6c:74:14:ce:4d:55:67:bb:c8:6b:73:44:1e:aa:1b:91:64:f5:
7e:a4:94:ad:4f:af:6d:09:c3:98:ae:71:91:1f:51:b6:3c:dc:
a3:6e:c0:bc:17:c7:28:54:74:75:09:08:4d:29:85:2c:92:9c:
b0:7c:fc:eb:bf:98:f8:88:7f:ad:38:5f:ac:18:ac:e4:dc:bb:
10:78:9f:2d:9b:4c:25:50:4c:ef:ae:7c:56:70:58:4f:2b:6a:
df:58:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:16 2025 by rpki-client