Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: szt2z6A94eYWRNmRoL3tWLx7qsiqaoIvaHS7RZLtSnk=
Subject key identifier: 77:0F:FA:99:08:C7:A1:A0:28:03:6A:63:4E:68:22:BF:9A:2A:64:52
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 0199FDD9AB248F7BB889DBEE2ED520EFE336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 044E
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (hash: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: fsq0IzFBtHg2lkBmXNVGNdodHgdZagJzMJv+coZF1wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ab:24:8f:7b:b8:89:db:ee:2e:d5:20:ef:e3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=770ffa9908c7a1a028036a634e6822bf9a2a6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:20:ad:50:01:15:02:97:c4:6e:95:97:f6:
ef:8d:06:0d:bd:e1:6d:ce:ce:ef:b6:59:ad:fe:6f:
a6:31:cf:ce:c6:f2:80:21:76:13:14:e3:99:f6:62:
21:22:a1:e8:fb:fc:e2:71:a7:16:3f:69:26:87:2e:
b5:2b:bc:7f:ab:59:24:f7:45:e4:f9:27:19:85:14:
e8:d7:a0:d5:66:6b:9d:ec:cc:c0:ad:5a:5e:59:fb:
4d:76:35:e3:b5:df:c2:5e:31:5d:41:45:b4:d3:b8:
5e:70:04:fb:3e:bd:47:66:26:79:d7:1e:e3:f3:53:
99:c7:af:be:38:ec:77:0a:69:b0:1a:b3:82:44:b3:
cc:54:09:46:3a:0b:ba:b0:2f:69:d4:ed:dc:54:04:
1b:c5:b2:bd:ff:fd:80:23:0c:fd:96:e6:16:09:b7:
94:35:5e:23:fb:cb:8e:d6:b6:8a:00:5f:18:ec:86:
11:2f:4b:d0:90:d1:f2:d8:87:ab:56:5d:32:81:d1:
4d:37:82:5a:e8:2b:74:97:66:eb:44:2e:dc:83:bf:
de:9b:2a:26:18:09:67:45:f5:e5:00:61:b6:26:e1:
f7:0e:27:5e:a1:c9:ab:7c:24:a1:c5:55:32:3b:8b:
4a:e0:ff:18:92:74:b3:93:e1:be:5f:87:f6:06:74:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:FA:99:08:C7:A1:A0:28:03:6A:63:4E:68:22:BF:9A:2A:64:52
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f9:0b:c5:ff:fc:87:0f:1c:89:b6:0c:5a:d5:de:68:22:45:
62:d3:e0:39:7d:e8:18:53:09:f9:dc:ec:6d:72:e8:d9:42:81:
db:37:a4:89:c7:7e:d6:a4:59:96:b6:23:1b:aa:70:c7:68:55:
20:ad:22:45:3f:ce:02:8c:9c:e7:7e:b2:38:08:6d:7f:38:23:
6d:6c:00:8e:d6:6a:a8:a5:e4:54:ba:18:f9:ef:cb:32:d6:8d:
35:1d:fb:f7:45:51:7f:65:75:cd:ac:c7:7f:a5:05:6a:4c:12:
57:5e:ee:b7:a7:23:ce:46:45:b6:a4:2e:05:2f:fc:ad:09:39:
34:b7:09:c7:3d:f9:85:cb:20:ed:15:4e:1c:a8:07:65:79:98:
d5:fd:9c:76:90:03:ec:fa:9c:9b:84:28:6c:27:93:27:a4:9e:
46:ca:62:46:cc:c0:88:d3:88:99:d0:c7:e1:42:56:c3:d8:6c:
ec:85:11:bb:c4:3b:ee:02:aa:55:27:4f:55:5b:f0:5e:8a:12:
18:c1:c0:f5:32:8a:35:75:6b:2d:9b:d3:46:72:30:03:09:20:
f4:cb:4e:b8:ab:78:fb:28:47:48:cd:82:a7:96:da:60:7d:08:
f8:1d:38:89:77:f7:07:5b:28:2a:d6:49:dd:e4:51:84:be:de:
a3:e5:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:54 2025 by rpki-client