Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: leJCTZqziOBZrx3gRojTrPI5bGouwMCQfo2gbY5i9ag=
Subject key identifier: A5:33:6C:BF:92:36:AB:D1:B9:C1:25:43:0C:DB:27:A9:09:F4:E7:1C
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 0199FD6AE0DBC4E6EE981DB9218765DAD670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 01C0
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: r158HyjzC5nw7t/wFBhD+Pj7YzFzDK0e5j0yrkYKnoc=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e0:db:c4:e6:ee:98:1d:b9:21:87:65:da:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=a5336cbf9236abd1b9c125430cdb27a909f4e71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:ab:83:02:3d:eb:4d:07:cf:10:b8:af:eb:
c1:b5:69:e7:5d:5d:cb:de:a6:a6:f3:7b:31:ce:93:
54:d2:f4:a1:a0:2b:5a:a9:80:c7:43:3e:96:a1:b5:
96:3f:73:7a:16:54:44:8b:e6:14:fc:72:54:7f:9a:
90:55:d0:7f:ed:e7:cc:2f:a7:75:74:8c:47:d2:7f:
c0:71:d1:32:56:9a:f9:8e:bd:68:cb:b0:bb:f1:4b:
8c:56:b1:96:af:cb:af:ca:2d:0a:f3:b8:f6:5d:a9:
ef:66:de:55:34:37:c0:b8:30:f8:c3:14:cd:0c:b5:
30:c1:35:02:ee:c9:d7:dd:b2:b3:55:be:a3:89:08:
d2:d0:26:0b:85:a5:95:e7:5f:73:63:e7:1a:63:85:
18:09:ff:4e:b6:9e:48:8d:53:9d:59:9e:b6:2a:af:
06:22:f7:9b:9b:6b:d8:5f:99:e8:3f:32:fe:ae:d6:
82:69:22:dc:f9:1f:d7:6d:72:9d:70:1f:d4:ec:e5:
5d:cb:b4:4a:8e:00:11:3b:9f:a8:27:dd:99:ac:be:
f7:9d:b9:27:43:2b:a6:31:d9:5f:e0:15:6b:52:46:
42:88:18:b6:0f:0c:38:13:e6:55:75:43:d5:e2:10:
f6:2a:9f:d7:f3:f7:47:57:ce:08:1a:d3:2d:ea:d4:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:6C:BF:92:36:AB:D1:B9:C1:25:43:0C:DB:27:A9:09:F4:E7:1C
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:5b:5e:f0:c0:c2:92:3b:07:3d:2a:a8:50:94:36:cc:fa:
94:65:f4:0a:92:fd:97:ac:86:e0:a1:01:34:74:8c:01:66:bc:
a9:df:ce:09:62:6b:d1:09:1d:79:75:da:d9:c3:43:8b:02:6f:
3e:ea:6f:b7:9b:3a:ec:82:78:99:30:e3:a0:50:fc:8b:7a:0c:
13:e0:0f:c2:17:d7:e7:33:e0:6b:95:13:83:1f:70:08:71:b0:
5e:74:07:cc:14:31:41:99:55:19:02:93:fd:60:14:76:a0:d5:
b1:4a:f4:c5:e5:30:90:12:7d:7d:4c:84:49:7d:21:d3:f7:ef:
9d:5a:83:a0:66:f4:c9:dc:6f:68:bd:ef:ab:61:18:90:36:c3:
27:8d:3e:ab:5b:7a:d3:78:d3:19:02:cf:c7:ad:b1:85:7e:34:
2f:1e:39:92:e0:e5:4f:fa:4b:cc:08:90:e9:09:7b:36:cd:f3:
e6:ae:0a:77:4a:9b:1a:7e:18:9d:17:e0:73:f0:53:e1:d3:ad:
b1:d8:4b:39:6d:52:28:fa:8f:8a:50:cd:f4:37:d2:8a:75:d6:
94:80:c9:f7:94:47:72:9a:67:8f:58:d0:01:09:31:11:25:d8:
ad:ad:fe:d0:aa:b5:bc:0e:16:fa:7d:79:d6:f4:b0:c6:3e:04:
3b:7c:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:33 2025 by rpki-client