Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: 3UhFGMfRNWM/zukLZ88/Utd8W9tc3VfTWPGjPLT4Kek=
Subject key identifier: 45:B5:2A:1D:86:81:C7:37:27:FA:99:11:01:E6:47:8C:A3:EC:34:9D
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0199FBEB8B86C3FF3BC0DF3A32375FDC912F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 04A0
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: MRU7KPW//Sz/A8NPQKw5qCzMTV6+cl6ZQHxkTrOe8qQ=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8b:86:c3:ff:3b:c0:df:3a:32:37:5f:dc:91:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=45b52a1d8681c73727fa991101e6478ca3ec349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:4e:4e:a2:a9:e4:68:43:9d:06:e5:1e:57:
0d:c9:a3:43:b7:35:5e:62:c0:76:bb:16:e8:64:41:
b4:26:f3:c0:ea:06:dc:88:8c:89:1f:b1:bc:36:63:
a3:d4:17:9a:14:32:a6:01:da:21:e1:9e:e9:19:9d:
1a:5f:29:75:0f:4d:f0:80:f0:eb:c1:3b:60:75:c8:
46:71:32:f4:f4:f3:cc:11:e2:78:a7:c5:ad:2d:a5:
57:48:a1:3a:35:ad:db:57:78:bd:19:d3:db:ea:06:
22:3b:26:08:c4:f5:e8:48:50:9a:10:4c:c3:52:79:
01:95:e2:2f:61:61:3b:a1:97:83:b1:bd:e1:bb:02:
92:fd:82:bf:f5:18:34:d3:70:fa:4d:06:5f:0d:c8:
28:bf:69:c9:61:3c:56:88:95:91:64:a5:8f:0f:c7:
1f:90:2b:05:85:51:0b:2f:d0:50:99:8f:a4:cc:73:
23:7b:7b:11:96:ce:04:9a:d1:9d:14:d6:06:b1:9d:
75:a4:42:22:b5:7d:90:24:93:86:e7:db:7d:d0:b5:
49:d1:1f:0a:04:9a:6a:3b:9f:2e:84:da:cb:aa:41:
a7:f8:d8:e3:5a:4f:7c:60:26:77:cf:dc:b4:e7:84:
29:7b:6c:35:44:96:78:7b:07:f8:0f:bc:6f:af:cb:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:2A:1D:86:81:C7:37:27:FA:99:11:01:E6:47:8C:A3:EC:34:9D
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:8d:dd:af:55:bb:b5:91:93:a8:77:64:13:a0:20:7b:02:
cd:7b:ef:53:87:ed:92:11:14:7c:ac:93:89:2b:57:3a:26:d3:
c7:6d:2a:e8:22:10:5a:5a:43:85:6c:f2:2b:27:a7:6f:cd:5c:
b5:e8:24:91:10:d8:0e:4f:27:d2:18:33:35:d1:57:c0:1c:13:
5e:05:f3:77:f9:85:ab:46:86:8d:56:28:d6:0f:42:e1:10:54:
ed:f4:e7:57:09:65:14:bd:5d:b2:8e:35:c6:be:84:ff:11:cd:
19:da:07:f6:a9:7b:ff:70:65:34:36:b3:72:4d:81:87:ef:3b:
a9:ee:81:ef:4f:cf:6c:3b:6a:5b:06:53:72:63:de:25:05:3b:
c8:b0:a1:33:f2:ce:5c:36:bb:55:00:fe:10:3f:4a:a3:5d:7a:
b3:0f:64:a1:89:02:a5:6d:de:1a:0d:b7:96:5a:f7:d6:c2:ad:
2e:33:99:2a:db:eb:f4:06:55:e2:0a:bc:3b:37:ca:70:4e:93:
55:b0:2e:44:b7:79:49:96:f2:09:31:07:7f:e9:71:b0:16:64:
f2:8c:9d:40:64:07:d3:99:b6:e7:24:2c:9d:70:bf:b0:a7:d6:
76:a6:db:02:e3:42:53:37:98:39:60:28:dc:00:58:66:7f:2d:
24:46:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:23 2025 by rpki-client