Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: 5A9wuZV+f2ELwtK3dHlLJQO3zBa6Q8JyZsGrfdHArj4=
Subject key identifier: C2:2C:67:A6:C4:2F:EA:6C:F7:F7:95:4C:50:4E:74:DF:67:84:DF:64
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 0199FDD8FFA8A5A60DA240306D6A410157C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0A2F
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: klMgg/BCzGy6xjCjm+jHJPZrPryC/F4hvKJhS/ciVQQ=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ff:a8:a5:a6:0d:a2:40:30:6d:6a:41:01:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=c22c67a6c42fea6cf7f7954c504e74df6784df64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:37:51:f8:31:da:94:d4:38:02:d5:f7:0b:
e2:6f:98:13:94:d0:a2:cd:91:3c:7d:05:89:01:3a:
31:d2:91:9d:0c:c1:cb:83:5d:c9:dc:82:c6:e7:1c:
d6:4c:5b:e2:50:1a:32:1a:88:56:bd:1b:41:bb:74:
be:c3:fe:93:0b:12:b1:2b:b9:3b:77:92:13:3c:14:
2f:e2:76:34:36:88:fd:ad:19:07:77:83:f7:d6:88:
86:19:67:ec:b3:8e:b3:a4:3d:49:4e:54:39:f3:c6:
b4:df:df:cc:72:08:ed:b6:a3:e5:da:9a:5a:45:51:
5a:8b:e2:eb:a6:01:84:25:11:b2:b9:02:33:a7:cd:
bc:fb:4f:ed:1f:8d:d0:52:4d:a2:9f:3f:37:a5:9f:
55:75:a9:e7:17:ab:ee:3d:cb:25:4c:a9:47:ad:30:
2d:e2:2a:49:0b:61:14:2b:94:dd:61:5c:d8:3d:77:
55:4d:e8:69:56:d0:d7:49:2d:6f:bc:b9:46:ee:e1:
a2:42:a2:f5:df:c3:5e:4f:eb:d5:71:39:e6:9b:58:
6e:82:24:15:77:65:83:57:04:1d:85:d4:be:f5:91:
30:33:6a:f3:23:36:ef:1f:52:f9:e3:da:fc:4c:af:
6d:87:3a:c4:99:ed:b7:88:d6:ad:ea:8a:8d:99:d6:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:67:A6:C4:2F:EA:6C:F7:F7:95:4C:50:4E:74:DF:67:84:DF:64
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:36:9d:06:74:72:79:4a:28:65:ed:71:bf:a7:84:15:f6:f5:
b6:c0:21:40:c9:1f:52:38:25:c7:84:38:4e:05:73:23:8b:1d:
80:a3:14:9c:db:8e:8e:55:7f:80:dc:64:a2:9e:36:ba:fe:bf:
35:4b:6f:29:d9:3e:d0:f4:fa:ee:b3:1c:52:fa:b4:8f:0b:a0:
23:e2:46:6b:04:3e:aa:58:c6:e4:09:e6:8a:85:cc:fe:62:0b:
08:4b:48:3a:4f:b1:07:15:20:94:d2:40:98:ea:7d:34:c4:f1:
4f:89:b1:03:99:8e:4f:e9:9d:16:30:a8:55:4d:ff:f1:43:0c:
e1:7c:92:4b:c8:a1:ef:13:29:db:27:ba:d5:5c:5f:57:1b:4b:
b5:f4:75:54:c4:e0:d0:7d:19:04:d0:1a:78:f3:30:3e:f8:e4:
b3:bd:a1:18:e7:6f:ad:34:06:65:0b:1d:e3:2d:e3:ab:db:3d:
8d:ed:5c:00:ec:7a:95:4b:f4:00:66:15:ca:aa:52:43:99:99:
22:fe:50:66:21:a8:b8:ae:d3:8e:30:1a:03:0b:d1:1b:41:ac:
e6:f4:80:30:0e:14:d6:17:be:b7:cb:91:bd:ff:19:69:cc:3b:
4c:80:27:07:e9:06:9a:4d:a4:52:bf:99:ac:ec:28:0f:94:40:
c6:ff:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:52 2025 by rpki-client