Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: H56OtzCNG51TGgSAiY69+CupVQQYnuorhMUft3vMJFk=
Subject key identifier: FD:72:9D:CB:18:CE:6B:26:7E:AA:F3:A3:D0:92:0D:DE:DC:60:09:F8
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019A00A2F4E96675B742808BF806F4C28BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 0217
Signing time: Mon 20 Oct 2025 08:01:10 +0000
Manifest this update: Mon 20 Oct 2025 08:01:10 +0000
Manifest next update: Tue 21 Oct 2025 08:01:10 +0000
Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: is0qxYf4xV8sj/pmU3tW1PNZxez3mh+rlGQdFyJBrLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f4:e9:66:75:b7:42:80:8b:f8:06:f4:c2:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Oct 20 08:01:10 2025 GMT
Not After : Oct 21 08:01:10 2025 GMT
Subject: CN=fd729dcb18ce6b267eaaf3a3d0920ddedc6009f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:ad:7b:d8:8c:93:48:d0:94:1e:83:f9:69:
4c:67:ab:15:a2:d4:aa:dc:99:fb:dc:12:73:5e:64:
ff:c3:5e:ca:07:3d:a2:5e:ee:ec:fd:ea:ab:37:51:
b8:e1:98:aa:81:c1:92:34:32:73:df:cc:89:4b:9d:
ab:7e:a7:e9:19:5e:fd:b2:09:42:b3:41:1f:51:43:
21:d6:5c:fa:df:ae:0d:56:e7:74:c4:5c:92:91:03:
eb:c5:51:e4:e4:3b:8a:91:38:4f:37:20:79:38:15:
17:7c:7f:1b:6f:12:20:57:ba:9e:91:f2:e8:57:60:
9b:f0:00:e6:52:5c:ef:0d:59:0f:3f:bf:ed:cd:cb:
e5:53:da:5b:7e:a2:76:b1:6b:1f:54:83:75:31:d9:
00:9d:d6:64:a8:30:be:83:24:b8:81:1b:9e:d1:d5:
bf:df:b9:24:d8:6e:9a:52:9f:61:24:dc:4b:46:f5:
99:b8:ff:40:6b:2c:ed:f6:2b:39:cb:38:7a:32:32:
e5:a8:87:fe:16:27:ab:54:e7:ac:0a:52:31:ed:d6:
09:10:62:e1:67:21:ac:cb:a3:d7:10:2e:f4:49:eb:
96:94:16:62:58:ec:c5:f6:32:12:ba:32:7c:a6:40:
20:37:dc:1b:73:37:fe:9a:79:e0:d0:49:e3:c0:f8:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:9D:CB:18:CE:6B:26:7E:AA:F3:A3:D0:92:0D:DE:DC:60:09:F8
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0d:81:67:de:ce:b8:69:d7:21:2e:13:5b:17:68:0c:3a:69:
5e:e3:2e:12:1d:7d:89:14:92:30:6b:82:38:10:57:e3:a7:c8:
b4:b5:02:3a:45:ac:46:ef:e1:00:d1:37:d3:ec:e0:1d:69:06:
b7:13:a0:7e:2f:ff:ef:3e:1d:83:84:84:04:d9:f4:2c:2a:d2:
04:ac:2c:02:85:a5:ef:18:ea:98:8b:44:d2:05:0b:62:3c:35:
42:fe:ea:2c:c8:d6:ac:78:49:97:07:ed:69:b7:50:5a:3d:91:
ab:f2:5f:98:25:08:84:a6:db:69:6a:f3:97:64:46:c3:be:a2:
f8:e6:f1:47:8f:ff:e9:0a:f5:5f:ab:57:b9:e2:c1:90:8d:ee:
97:fb:d2:c6:fb:b6:e9:5d:dc:c2:14:c2:0c:70:59:fd:9d:03:
a7:74:8d:b1:43:45:20:84:17:23:f9:cc:75:0f:61:56:aa:e1:
85:bd:9e:5c:0c:b0:6f:07:19:3c:70:9a:f6:44:26:ec:b5:55:
e3:85:93:79:01:64:27:c2:d5:ba:e8:49:54:2d:4c:40:3b:0d:
d5:05:52:29:1f:59:62:9c:83:d4:c4:e8:72:13:6f:fd:50:be:
97:5b:aa:98:bd:be:57:47:4c:91:4a:fc:6b:9d:b1:e5:bb:4e:
9b:f6:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:32 2025 by rpki-client