Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: 84i30WKHAvclIcm6zu7zmEaPpJCESWLiYPU6TkNqJ3s=
Subject key identifier: 87:F3:15:D0:DF:86:0F:88:FD:3B:60:5F:8F:F1:94:44:82:25:9D:20
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 0199FE4705E8EEE683688AA77F34AC6724D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1022
Signing time: Sun 19 Oct 2025 21:01:31 +0000
Manifest this update: Sun 19 Oct 2025 21:01:31 +0000
Manifest next update: Mon 20 Oct 2025 21:01:31 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 8kFem89WfkyiuYli/FBd245MYRTp+Jb7J+H6s5w1Luo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:05:e8:ee:e6:83:68:8a:a7:7f:34:ac:67:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Oct 19 21:01:31 2025 GMT
Not After : Oct 20 21:01:31 2025 GMT
Subject: CN=87f315d0df860f88fd3b605f8ff1944482259d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:04:aa:41:38:95:ad:f9:85:1a:fc:e7:ac:
61:d4:cd:27:7a:ac:7c:2d:19:b1:41:7d:3c:3b:ad:
26:c2:61:1b:53:9a:52:2f:68:15:54:40:38:39:92:
f5:ad:24:ff:ef:2a:0e:93:de:ca:22:a6:19:e1:1c:
58:17:98:38:aa:79:4c:c3:78:47:8d:f2:bd:1f:6f:
5f:6c:c1:2c:d1:8a:26:4a:b9:53:e1:9b:b7:43:e4:
73:2a:f1:b2:6d:93:53:50:2b:53:ef:5b:d7:96:d8:
b0:a8:86:c9:78:bb:f0:a5:f9:dd:f3:ed:de:82:93:
0f:29:b3:a5:2f:8d:ce:8b:57:0b:3e:45:30:56:db:
a4:51:58:94:30:06:23:94:0f:cc:f7:ff:29:f9:2d:
aa:09:24:df:fb:f3:1d:cd:0a:07:e4:2e:db:ec:bc:
e4:dd:7e:14:87:53:e8:7a:22:91:6d:34:16:0f:d8:
c0:df:6e:3a:20:90:38:8a:f2:e7:1e:c9:7b:b0:14:
ef:37:16:cf:54:ab:ff:d8:50:43:08:38:7c:3b:75:
50:fd:2e:50:b0:20:11:07:c3:13:3d:0b:ae:0a:3c:
a7:12:ce:fe:0f:dc:24:d5:31:aa:7e:8c:7e:ce:d8:
96:07:74:1a:a7:24:26:db:e3:f4:fa:3c:8f:63:ce:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:15:D0:DF:86:0F:88:FD:3B:60:5F:8F:F1:94:44:82:25:9D:20
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:74:1c:b5:8f:0e:1d:34:d0:a4:7f:1c:e4:86:73:7b:8e:e3:
c6:9f:ee:1e:2b:e3:c8:03:78:49:e8:ae:e3:9e:5c:10:25:8a:
4c:11:9b:16:07:6b:86:49:71:5c:de:ff:62:a9:a9:c4:9d:ce:
db:a6:8f:5c:ab:f2:7c:20:4b:3a:48:25:f0:1e:2d:ba:19:87:
8f:20:ee:ad:a2:18:ea:11:f9:ed:e6:f0:78:06:fb:66:39:8b:
dc:66:75:3a:66:07:69:65:bd:bf:e6:fd:6f:45:64:56:f9:c8:
9b:b3:48:e6:44:61:f7:94:76:fe:dc:6b:6f:19:cc:93:37:e0:
8f:9b:35:75:08:48:44:dd:16:61:ad:f3:07:b7:9a:44:80:cf:
8e:f8:5a:5a:da:21:2d:b9:f3:35:22:64:e7:1c:ae:d0:dd:57:
a9:57:95:79:84:a7:5b:cd:c6:e3:ac:56:ca:71:bb:e5:ff:b0:
a8:80:49:e7:8a:76:9a:d9:25:e2:8b:a9:39:bf:17:5e:4d:5f:
d6:27:88:29:03:f5:88:4f:3f:66:a0:5a:2d:de:7f:f9:da:e0:
49:dd:47:24:5e:67:4b:28:78:eb:56:ac:57:90:17:02:b0:03:
9b:fc:5d:d0:20:99:4b:2c:b2:c1:06:3f:79:51:e6:05:96:3b:
d9:3e:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:00 2025 by rpki-client