Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: X8IrLy7OrEpMYTq6CQgovhC6LKl0wgVS+20P8onpqik=
Subject key identifier: BC:E1:75:D1:46:53:F8:49:38:2D:D3:86:24:09:49:C1:75:4A:CE:EE
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 0199FEEBDD20E3AD9442DDF2AEEB73E47B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 051D
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: EkhjhvBga-pOZcKQYHzx81PL74Q.roa (hash: D/4rtr9uXbwRRBeoPwWbT2YwGXeqoCsTX3oCjTbbKu0=)
2: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: GT4VWg7UJ4k0VGk8ocScYuab+PQe7vAldyw9sl6kiWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:dd:20:e3:ad:94:42:dd:f2:ae:eb:73:e4:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=bce175d14653f849382dd386240949c1754aceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:ef:2c:7c:b7:8f:8e:3e:2c:30:65:a0:e4:
11:aa:03:31:64:be:a8:6a:d5:15:a0:e2:c9:46:2a:
63:38:4c:ca:b6:b3:bc:b2:1a:c3:87:c7:88:6b:d5:
34:45:d9:cf:74:45:9d:26:ea:33:ab:28:18:b3:96:
1e:0b:9f:ac:3f:01:e9:f0:94:2b:ae:4e:5f:96:e0:
61:03:34:a8:ff:8c:59:2f:c1:83:84:c8:51:00:84:
98:b0:a5:e6:b6:a6:02:5d:5f:5e:35:95:00:4d:3e:
ed:c7:49:7e:0b:a6:bb:cf:44:0a:4a:4f:ca:16:26:
72:0a:ad:ed:2d:40:07:bc:14:79:ce:2f:af:dd:e0:
e1:fb:6a:3b:ad:6d:4d:5b:a1:96:7f:25:13:fc:eb:
f7:5a:49:fb:fe:66:40:f9:d7:ef:d9:43:8f:34:3b:
64:51:d9:0c:19:84:9a:18:22:8c:e0:a0:80:32:35:
e0:05:5b:0d:b0:3c:c7:1e:7c:f6:6a:78:9a:54:7a:
25:fe:28:75:b8:09:eb:03:17:ca:1a:a5:eb:c6:bf:
2e:c6:d3:b6:e5:f0:03:ad:aa:43:46:e5:86:2b:ce:
70:74:b6:b4:1c:83:f3:f3:4e:5f:5d:ec:90:a5:2b:
1e:9b:64:e4:ba:a4:0c:c3:a3:95:67:ed:e5:a7:80:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:75:D1:46:53:F8:49:38:2D:D3:86:24:09:49:C1:75:4A:CE:EE
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:52:47:bc:eb:19:5e:03:78:3c:77:58:a2:7a:13:08:54:
f0:d4:0a:72:a6:bd:4f:b0:c1:a0:e3:7f:ce:fa:ce:e7:fd:26:
8c:c2:22:6b:4d:7c:21:eb:c1:6d:61:dc:6e:eb:e3:13:67:3c:
58:ae:32:c9:a0:f6:92:9c:05:0f:f3:fd:7d:d8:0c:43:f3:05:
bb:62:a7:80:00:0a:9f:dc:bb:4e:05:8c:e3:63:c0:15:1e:1d:
96:25:5a:35:af:73:73:e7:f3:07:ae:25:d7:42:a7:1e:e2:a2:
be:9b:43:a2:2f:32:ac:17:5f:8b:5d:5b:a9:2f:8e:ad:b6:ce:
00:2d:0a:71:17:23:82:f3:9f:53:a5:31:79:af:b8:2f:56:dc:
47:37:ca:77:ca:76:92:ec:dc:b9:f0:c0:6f:70:81:f2:43:c8:
e7:79:d5:63:cb:a9:9c:08:d9:bf:6a:6a:b1:0c:a5:10:7d:87:
d1:27:f8:5b:4f:bf:e0:23:47:94:1e:73:5f:a0:a8:9d:9f:5a:
dc:a6:7c:3b:84:4f:8c:91:f5:9e:fa:16:ee:ba:7e:13:c5:2f:
7f:0f:90:98:79:35:3d:04:57:e3:ed:2a:47:55:a5:09:b9:e4:
cd:c1:c2:8c:ee:c1:32:d1:99:7d:78:02:0e:f3:d0:04:87:3c:
cf:18:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:59 2025 by rpki-client