
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: v1U86yThqqu+WMk05EW2SiI1JiMvFO/qxP5+BDC6DIM=
Subject key identifier: DA:35:87:C3:5D:15:E1:3D:27:0D:E2:50:CF:16:34:0A:F9:5D:C8:14
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 0199FC8F8A916201632CD7ECC086180627CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: Dt8NQqp9dTEbWYSJJfx28hcsByPysC6cabuftBWg240=)
2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:91:62:01:63:2c:d7:ec:c0:86:18:06:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=da3587c35d15e13d270de250cf16340af95dc814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:1b:37:63:f9:4d:0c:c7:f5:8e:9a:2b:f0:
87:b2:e6:b1:8e:da:a9:0d:be:a6:b0:3a:54:0d:77:
29:4e:58:47:5e:ae:35:89:31:c8:33:c6:29:b3:d3:
08:c3:35:68:60:e9:2d:1f:48:7c:c2:27:9e:bf:fb:
7e:31:a9:39:1f:10:59:f6:cd:fe:5a:ce:98:9a:75:
ee:a2:a3:d1:c2:94:2d:27:77:42:a9:29:bc:dd:9c:
5a:db:49:99:ad:39:2b:b2:78:10:5a:af:e8:1d:73:
e5:a3:c7:92:db:c3:17:c0:02:f0:c5:dc:f4:39:1b:
4e:56:f1:5e:9e:02:94:ea:ee:e7:da:8b:65:0a:1c:
11:94:d8:8f:1b:48:b2:a8:44:a2:93:bc:e1:ac:9a:
10:07:ea:8d:3d:ee:de:8c:65:29:82:63:d5:77:05:
d9:c2:44:65:04:04:fd:d0:24:7d:27:24:a2:7d:f3:
a8:f2:24:ed:c6:8c:11:35:0e:cb:ed:ce:84:53:85:
9c:e8:04:01:e9:da:fa:92:1f:52:26:b6:85:cf:cc:
7c:15:a0:0c:f1:07:d4:91:74:ec:c2:e3:ba:5f:29:
c0:d6:0a:9d:4c:60:4b:cc:9f:6f:aa:34:93:a5:01:
90:fc:77:42:dc:b7:f5:87:db:ca:66:04:57:cc:4c:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:87:C3:5D:15:E1:3D:27:0D:E2:50:CF:16:34:0A:F9:5D:C8:14
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:89:b3:2f:51:ef:f5:38:39:07:a4:de:cb:27:7d:5e:09:a1:
b7:c0:35:d6:84:11:8d:88:c2:1a:2f:c7:9a:43:61:dc:d5:c5:
a1:e7:d3:53:39:74:5f:98:cb:6d:ce:a7:06:08:b0:54:74:ff:
f2:4a:7c:51:f0:cc:54:be:0b:da:65:65:ab:c6:5c:46:04:36:
6e:15:56:a1:8f:0e:36:ef:d8:16:4c:20:9d:5a:61:2c:98:ae:
f1:84:17:8d:c3:a0:4a:a5:cf:88:7a:b8:86:3d:b4:d9:ae:fd:
c8:06:40:45:06:f2:f4:fb:6c:77:59:d2:bb:4c:4b:7d:65:21:
8c:d9:20:ca:29:d2:9f:19:4a:fd:88:7a:f3:eb:80:5e:18:55:
94:cf:d6:b2:13:54:de:cf:c1:2d:8e:57:84:d6:39:1a:d8:7b:
7c:72:96:e7:c0:24:7a:15:9b:7c:18:f6:06:ab:b9:5e:da:4c:
57:27:a0:24:d8:b6:fc:27:86:62:9c:e1:42:70:ca:62:49:f7:
c8:1c:81:94:97:ca:7f:48:e9:f4:86:74:41:cd:6e:8b:dd:88:
3e:9d:33:6b:a7:90:08:07:d4:ef:31:db:6e:5f:4d:1f:41:ec:
33:fe:cf:3d:9d:6b:1a:dd:4d:1a:f9:96:9a:30:05:fb:89:05:
2c:d8:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:08 2025 by rpki-client