Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 4QzytaAGfs6m5xCJTxWMEA9xL8TIjNII6Qk2hMwvI7c=
Subject key identifier: FF:89:F2:B9:62:35:39:85:6B:03:45:A6:94:5B:EA:4B:12:60:1B:D2
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 0199FE7DDE69E88D43401B11CBF3DE02B6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0BF6
Signing time: Sun 19 Oct 2025 22:01:25 +0000
Manifest this update: Sun 19 Oct 2025 22:01:25 +0000
Manifest next update: Mon 20 Oct 2025 22:01:25 +0000
Files and hashes: 1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=)
2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: NQnHkWl8sh9gwZIqSEnbtzxtDYziHkMhGBOBLUvD9/c=)
4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:de:69:e8:8d:43:40:1b:11:cb:f3:de:02:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Oct 19 22:01:25 2025 GMT
Not After : Oct 20 22:01:25 2025 GMT
Subject: CN=ff89f2b9623539856b0345a6945bea4b12601bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:68:46:03:58:ac:1d:87:cb:24:05:cc:c8:
dc:61:b9:a4:b5:8a:d3:05:e6:f1:b0:0f:c5:d8:60:
70:bb:fa:25:d6:01:d7:4e:f1:c2:19:c1:e5:96:b1:
c8:aa:ac:a6:e8:75:51:f5:c2:1d:f9:33:aa:f0:0a:
7a:76:b1:37:d4:5c:8f:c4:b7:99:ee:8b:75:c5:66:
d3:61:ae:43:0e:5e:cd:c8:6b:83:2b:10:b6:f4:18:
b4:fc:50:cf:8a:4f:9e:b0:a4:0e:c9:46:fa:50:29:
6a:d2:af:d5:70:2d:38:dd:a4:af:b9:2b:2b:43:b0:
bc:0a:1e:d8:ad:bc:b5:2d:4a:fc:b3:f9:f2:03:98:
7a:e3:a5:32:f3:c1:81:5d:13:8b:2d:e1:c0:05:52:
57:a4:9e:86:ec:7d:bf:24:14:17:f3:4c:ee:2b:1f:
15:0b:79:61:d1:1d:a1:a6:41:8b:f3:05:21:c3:a2:
4b:d2:c7:57:62:1e:d2:7e:00:39:f7:3b:f9:cb:da:
17:4d:cf:ee:0b:21:6a:2b:ec:d2:f8:fa:59:88:2e:
41:d4:0d:8a:58:b4:8c:64:30:e2:34:f5:4a:62:80:
64:fb:f9:2a:d2:1d:b5:d6:d9:47:a6:da:f4:70:83:
4f:57:81:8c:89:b1:1d:b3:86:75:de:44:b4:30:65:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:F2:B9:62:35:39:85:6B:03:45:A6:94:5B:EA:4B:12:60:1B:D2
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:82:de:75:27:e9:ea:14:f1:60:40:c4:dd:a0:ed:88:45:
a2:b1:f8:2a:76:c6:1a:22:4e:78:f3:b5:91:44:2b:7d:9b:94:
3d:4a:ae:1c:74:43:7a:7b:07:fb:61:bf:be:0b:ac:ed:d3:02:
d0:0f:33:a3:a4:af:07:f5:fc:0e:1b:db:28:08:55:ec:e2:f2:
32:75:44:99:86:c7:ef:ea:b3:c0:4d:b5:50:a9:c4:ad:76:3e:
4c:ca:43:d2:10:0f:7d:93:75:fd:b4:21:84:3a:6f:52:44:7e:
55:6b:2d:5d:d1:15:82:7b:08:9d:1b:ad:06:f0:c8:c0:7d:20:
6f:d1:67:de:0b:28:f5:7e:da:a9:25:c9:da:17:ac:96:57:d3:
86:c4:dc:6b:f8:25:51:d8:4a:4c:3f:8a:30:a2:95:99:2a:f1:
a8:62:89:0a:a5:0e:e5:db:08:05:ed:f9:6d:f1:e7:bc:4e:09:
9a:98:12:cf:0a:54:9d:2f:6a:4f:c6:53:de:d1:d3:86:f9:00:
b0:c4:09:31:18:a5:c8:a4:9a:c3:f5:4f:7d:0e:49:f5:64:da:
31:47:67:38:16:0b:48:8f:ee:f2:d0:25:d1:e8:64:88:17:7e:
1f:9d:2b:39:e4:b4:ea:77:64:8f:07:31:c4:03:3f:6c:82:61:
88:eb:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:13 2025 by rpki-client