Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: thZXHnX4RRnCXc7DY13xVihVAHXpUmgtATp8tRxsTOY=
Subject key identifier: C8:BB:86:8D:F9:34:D7:5E:2C:D6:DD:7C:A7:49:A8:22:05:F3:35:A2
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 0199FBEAF38E63003EF3F460F6370AAB3CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 076D
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: WqVK1o6p4JTmZam0xwjEDL4ugcVgr1W1cpIzpJUhzD0=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f3:8e:63:00:3e:f3:f4:60:f6:37:0a:ab:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=c8bb868df934d75e2cd6dd7ca749a82205f335a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:04:32:5e:db:0a:8d:ed:00:f8:ed:d5:10:
fd:97:f9:48:9e:a3:7c:57:7e:28:f3:8c:c1:61:57:
3e:f1:94:79:bb:da:76:9a:10:b4:92:61:de:a0:d6:
1b:4f:dd:38:12:5f:91:98:2b:5c:2b:8b:7d:a0:e9:
bc:b2:dd:52:0f:bf:41:a0:6d:11:12:4e:31:f9:51:
b6:4b:4b:33:88:b2:f8:c7:91:7d:0e:3d:e3:2d:27:
c6:a3:23:da:e2:3e:c4:6b:1d:8b:93:9f:41:8e:a6:
04:e3:e4:38:21:04:85:ae:90:05:75:b7:37:99:9c:
7a:ad:58:1e:e4:6e:d7:4a:f0:d6:31:88:10:de:ae:
1e:8c:47:7c:3a:21:0b:1a:4d:43:fa:7b:8a:30:c7:
7c:ce:7e:e3:50:19:f3:20:a7:db:50:d7:9b:a4:f3:
72:b4:24:c0:66:7c:17:0c:c9:fa:c5:ae:d7:1c:f8:
4c:b7:93:2c:c9:5e:4e:49:c2:68:94:1d:0f:69:6a:
7f:39:78:c8:38:6e:e0:eb:7e:8d:d7:90:f2:f4:a7:
83:97:95:9d:9b:a0:92:e2:fd:0f:3a:8e:1f:57:a7:
a3:15:93:4f:57:f6:f9:6c:23:a7:49:e3:66:f9:6a:
a0:20:f7:a6:5b:e8:53:91:95:93:2d:b2:32:f0:72:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:86:8D:F9:34:D7:5E:2C:D6:DD:7C:A7:49:A8:22:05:F3:35:A2
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:44:ed:b7:f3:e3:5a:d5:80:82:a5:57:bb:26:7f:03:10:69:
22:ff:40:68:3f:78:81:10:d3:8f:8a:05:bb:40:ad:52:c0:59:
6b:b2:27:b0:10:0b:27:4f:8c:53:db:91:3a:31:41:d5:f3:a0:
c5:d0:6a:31:ed:38:23:9d:96:cb:3c:1d:d9:a4:50:b2:06:40:
a2:d3:94:3e:55:62:5e:30:d0:34:4a:1b:6e:21:e7:0d:ff:20:
02:dd:0d:eb:03:70:f0:39:94:23:26:4b:0b:a8:0d:3c:1e:7f:
9b:ce:1d:3c:84:33:a7:f4:8e:02:92:ce:b8:e1:cf:55:e4:b5:
3e:9b:fe:9e:2f:ee:4f:78:af:0b:b3:b1:93:89:a4:f8:44:df:
6e:e3:c3:7a:7c:92:3b:9d:88:b2:5c:de:52:0e:6d:f3:1b:f4:
d9:b1:bf:d4:9e:7f:5b:d2:28:d7:69:ac:5e:fc:55:d0:b1:62:
91:a6:72:f9:00:e3:4a:d9:7e:ab:ce:44:46:77:1e:6f:4f:3b:
8a:0a:d8:87:7b:14:27:25:20:3e:07:a7:1b:17:22:0f:d8:82:
cd:39:42:b9:47:33:73:87:49:3c:5f:2b:9c:c1:63:e6:30:2e:
05:59:61:7a:45:0a:38:6a:a1:08:86:4b:4b:19:46:e1:4e:9e:
0e:73:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:22 2025 by rpki-client