
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier: qP90rj2RpuMPNsFz5XcD88soe0dSNolA3DCiYlkE9h0=
Subject key identifier: 5C:4F:F3:A2:B9:D8:F2:D8:86:26:7A:41:38:DF:36:30:0D:DF:BE:68
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 0199FC8F75191D090F28E359A9644B731BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: bPOEZEQL5Y5XYv2RPbF+CR4Y+diUz9P1TkA1RF9B82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:75:19:1d:09:0f:28:e3:59:a9:64:4b:73:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=5c4ff3a2b9d8f2d886267a4138df36300ddfbe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:b8:d9:a0:89:51:90:cf:e5:b3:2d:d4:90:
02:40:98:cc:59:ef:f5:53:32:97:8b:d1:6b:1d:74:
24:04:56:0d:58:d0:ad:ef:1f:69:0a:ec:68:60:40:
6a:5f:c9:4c:22:c8:26:10:35:35:f0:b0:70:26:a5:
58:d0:40:27:18:5a:6f:a9:47:e8:71:24:27:4c:87:
27:54:8a:1f:4f:b4:21:a6:c0:e6:d8:34:08:cd:37:
14:3b:80:d5:67:d8:d4:32:15:0f:8a:b8:3e:89:fa:
da:25:58:f7:e6:cd:c1:97:7e:15:31:3f:21:cc:66:
79:51:3b:6b:aa:d9:15:b1:66:46:1e:18:be:56:b7:
fa:8d:b8:e2:58:34:b1:b9:06:84:81:3a:dc:c3:60:
47:10:50:50:9b:bb:65:62:ca:9f:f1:40:dc:e7:5d:
ea:ad:6e:d7:a6:a5:96:e6:e6:28:1a:0e:73:fa:a6:
68:cf:44:6b:c2:9d:ea:ef:06:83:b4:f3:22:0f:a8:
b3:9b:65:93:be:6c:71:c6:bc:b0:06:99:4b:7b:a1:
79:0c:7d:ca:73:7a:1b:c4:a2:c1:f3:37:69:f6:bc:
68:91:f1:ae:9f:a6:29:0b:17:2a:97:11:67:c4:9e:
62:5e:bc:92:94:08:37:a1:65:0c:49:7f:3e:12:99:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:F3:A2:B9:D8:F2:D8:86:26:7A:41:38:DF:36:30:0D:DF:BE:68
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:22:e2:34:88:7b:bb:43:bf:d3:8a:41:82:55:57:57:57:
93:da:b7:6c:09:85:a2:a1:e0:e2:7c:c1:01:17:fb:47:f7:dc:
86:64:ce:a9:dd:ff:81:2d:dc:64:6c:ce:09:7e:aa:dc:02:d7:
be:21:e7:00:e9:e3:83:db:e5:e1:ec:71:d1:13:a6:eb:d5:50:
ac:25:1a:02:96:6c:28:53:39:9b:99:4e:df:10:fb:36:e4:90:
36:51:03:de:fc:5d:58:7d:f5:2c:e7:9e:9e:25:b4:76:2f:1f:
65:bf:85:a2:24:30:be:f6:e6:3b:48:f5:42:1e:d7:b5:4f:18:
da:c0:f8:23:dc:b8:98:97:7a:76:51:8a:0f:68:90:a8:2a:f2:
f2:75:6b:48:27:92:02:55:ab:63:3a:09:70:d8:0a:1f:13:63:
42:35:42:fa:fc:3b:ac:dc:25:c0:6f:e9:51:f1:ed:5e:2e:c8:
61:ea:3b:8b:cd:1e:50:9b:56:4c:ae:44:d2:fa:84:43:8f:e7:
05:3a:ac:2c:0d:aa:ba:3a:23:7e:6c:ec:bb:36:f0:eb:b8:db:
5d:d1:5a:42:8c:8c:c4:13:27:f6:3f:88:d5:f6:19:e5:e0:20:
3f:9a:62:88:c5:62:0f:b3:c6:98:cf:ce:4b:e6:66:f2:d1:4d:
50:c6:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:55 2025 by rpki-client