Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: jps5qA8rLVP1vNJ+ZeDNDkhSLDwVvQY15fv3A+kAmBI=
Subject key identifier: 1B:D7:7D:9D:36:B1:25:BC:96:AE:E7:5E:B5:C0:85:1A:B9:40:5C:54
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 0199FDD94D1395BF9F928B20F9A17E1C5748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 0442
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: Il8CSveHvqeNn_p3vs8bpbLd6io.roa (hash: uiHORBlA13Y/5lqKteAG7JddRpbP5NcKY0DSl6kuJ/A=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: 7OPx5pTgSQ+E/ph3op5dnLmUQKjXGg7nmV7O5cc6r7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4d:13:95:bf:9f:92:8b:20:f9:a1:7e:1c:57:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=1bd77d9d36b125bc96aee75eb5c0851ab9405c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:08:c0:f9:16:e3:9e:8c:11:6e:c5:5f:db:
97:d8:e3:a2:5e:e0:d1:88:8a:7e:e6:c4:a7:b8:d0:
4b:46:d3:6b:28:ed:41:6b:b4:f2:04:ce:ea:c8:29:
77:fd:30:e5:a4:fa:f9:bc:36:1d:43:b2:2a:f5:d5:
4e:f3:db:ab:a0:8c:34:02:ad:35:5d:b0:1e:15:82:
d6:f6:9d:1d:57:36:a5:61:79:96:49:8e:45:ac:c0:
be:97:3f:38:17:77:d9:2f:6e:e3:c1:d7:c5:ae:43:
49:c1:91:d7:4b:94:cc:60:a9:30:7b:fc:cf:58:f5:
8e:d6:c4:60:f2:8d:4e:e2:c4:3e:2a:c3:47:4f:04:
61:3e:b7:ff:72:dc:f1:e2:b3:d7:d4:0d:1b:95:6e:
49:73:3e:98:be:ba:31:35:1e:96:01:9b:1e:7a:ec:
93:8a:e6:7e:e6:2a:cd:af:e8:78:bd:ff:39:9e:66:
4d:47:33:43:52:68:63:d7:19:3c:a0:8b:31:04:26:
5f:37:13:ea:95:50:cc:80:38:cf:7b:6a:b7:9d:24:
cc:19:22:39:8a:ff:06:63:b0:95:0b:a2:d5:f7:83:
77:c2:56:1b:e1:e2:fd:8a:e8:16:cd:2e:0e:32:78:
15:a3:94:e7:b8:1a:fe:e1:31:d0:b8:13:f4:7a:08:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:7D:9D:36:B1:25:BC:96:AE:E7:5E:B5:C0:85:1A:B9:40:5C:54
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:1a:5c:af:48:60:f9:36:d7:00:38:5f:31:35:11:34:2d:
eb:da:5d:f0:84:7e:e5:16:7d:cf:b6:06:45:fb:83:1c:1b:b2:
bd:70:57:ac:09:cb:ab:f3:e9:e0:ce:1b:af:bd:fd:f0:41:7e:
da:c9:be:f3:29:3a:1d:68:71:eb:f2:23:38:9e:4a:38:39:38:
97:e0:00:17:35:7b:f4:d1:34:6d:9c:2b:81:d3:cc:88:cf:1e:
b1:0b:9e:35:bc:3b:05:0d:ee:fe:eb:5e:ca:a5:dc:77:76:41:
91:7c:57:fd:f2:a9:29:48:cd:98:0d:0a:74:0c:96:c9:e6:5e:
3a:dc:76:1e:31:27:ab:ed:f4:d3:00:85:a1:4b:11:5f:2c:1a:
fe:64:7a:62:86:6c:ad:dd:63:17:de:70:4d:70:0a:27:76:ea:
c0:4f:08:f4:24:4e:85:aa:ed:cf:cd:07:cd:19:24:9c:7f:09:
e5:55:f4:0e:1f:84:ac:29:2e:85:70:44:3c:f7:e8:a3:d8:6b:
a6:3b:43:37:01:28:cf:41:f5:58:03:35:5c:7f:5d:f9:19:28:
1d:e8:5d:08:69:a5:2e:cd:90:1a:d1:14:49:92:dd:33:ae:f0:
95:22:8a:54:e1:7e:27:7e:83:d2:a3:98:53:d3:7b:1c:d9:ef:
de:4a:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:09 2025 by rpki-client