Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: AcpU9F5dABFf/pzkWeaomuEvLTA4RqJ0wqriRE80t0M=
Subject key identifier: E1:E9:49:1E:2F:45:B9:AD:C9:42:DE:82:84:91:0D:76:F8:82:5E:2B
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 0199FB7D00A97EE5BB03E279800D1B4F7A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0EE5
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: N4aKu8jzXjWe7YgUczQGk+FrrTWMjcNRni7nJ6VxmjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:00:a9:7e:e5:bb:03:e2:79:80:0d:1b:4f:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=e1e9491e2f45b9adc942de8284910d76f8825e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:47:99:f2:4c:0e:2a:b8:ff:21:fe:52:54:
cc:e1:3f:5c:39:c2:11:a9:b6:4e:08:a7:60:99:59:
24:71:e6:49:21:00:a1:c8:73:d0:a1:c1:f0:0a:ac:
9d:0a:84:a8:cc:e5:70:b5:fe:94:b6:60:04:a8:59:
ec:fe:bb:3b:15:f5:95:45:13:c7:1f:5a:fc:15:05:
4f:24:5c:e7:04:80:e5:f9:54:80:9c:a8:9c:f8:81:
68:03:5c:e8:b5:7d:7e:3a:48:f3:8f:70:cc:b8:72:
8d:73:cd:e8:43:28:9a:6d:cb:17:86:76:9b:0c:c2:
c2:9c:8e:b3:9b:2b:2a:48:67:29:a6:51:fc:4f:c3:
62:7e:b2:d4:a3:51:7b:cb:ef:bd:5e:2d:29:04:cd:
cd:0f:09:56:6f:27:6f:fb:f5:ae:27:83:60:87:d8:
db:52:26:e6:25:31:c4:a3:e5:13:e9:f2:95:81:69:
b9:63:85:b5:3a:10:88:99:ef:27:7c:45:1e:d4:db:
cd:a5:78:3b:fd:da:f7:aa:c7:d6:4a:8c:31:71:80:
dc:de:39:46:a8:11:2f:95:84:18:31:95:ed:5b:7b:
6b:62:9c:d6:04:69:f3:5f:7b:c1:54:f9:48:1d:0d:
43:fb:a9:58:95:47:4c:eb:8d:14:2c:73:c2:1a:78:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:49:1E:2F:45:B9:AD:C9:42:DE:82:84:91:0D:76:F8:82:5E:2B
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:23:24:26:12:2c:48:eb:32:43:e4:3a:5e:a6:39:67:04:7b:
5b:50:e2:b9:75:a2:74:d1:ac:0b:38:57:06:2a:d9:b1:c6:20:
09:cd:ad:74:93:c0:c6:db:eb:1d:28:b1:c7:78:84:b9:d4:b8:
26:7b:f0:0a:4e:f8:b8:53:f7:79:7b:bb:68:0d:2f:58:e8:97:
c6:84:78:85:02:62:ac:02:e2:02:55:52:65:10:98:a3:d2:64:
0c:1f:e7:33:6e:96:78:85:1b:5c:ff:71:be:1f:ad:b2:f2:46:
1e:c7:8d:88:04:d1:14:81:b1:77:84:7c:0e:5e:c7:e5:8f:db:
f6:cd:06:b0:da:b3:81:9a:0a:42:4c:6d:94:1c:10:01:8c:12:
44:85:82:a0:17:68:8c:f4:8e:21:6d:3f:93:46:28:80:e8:38:
08:ea:df:2a:29:76:4e:ea:35:d9:f6:e9:4c:de:23:e5:6e:57:
4c:08:d3:2f:4c:36:75:19:4c:a8:21:9c:4a:a2:98:28:a6:13:
1c:d4:17:dd:b8:c1:eb:38:bf:c8:c6:73:05:b3:d5:79:9b:e3:
7a:54:9c:40:c6:80:4f:c3:2f:10:a2:0b:44:17:c9:40:f1:7e:
8d:c2:23:19:00:47:bd:4e:d1:c0:c1:df:ba:02:c4:86:0e:9f:
1a:d0:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:53 2025 by rpki-client