Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier: d4UyAthGFL5DP6oHTk0Nl8vHx2HwMW7AdrnmwOvHz2A=
Subject key identifier: 0E:A1:6D:66:6C:0B:53:F7:0C:0F:34:7A:1D:4B:A6:D5:CD:E7:95:14
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0199FFC76D3673E7428F6C9B5D0D15ECB695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: +abVMVzA1Nnkrp9KL5xUBQ/wkgjeM1oFyMgNPx4wKxY=)
5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6d:36:73:e7:42:8f:6c:9b:5d:0d:15:ec:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=0ea16d666c0b53f70c0f347a1d4ba6d5cde79514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:23:63:4f:9b:f7:4e:9d:50:ba:2b:2c:0e:
36:b2:4e:1a:c0:a6:6b:90:92:d9:29:ba:bd:2c:3f:
3d:fa:35:dd:09:30:7b:98:4e:1f:7a:14:7e:32:0d:
b2:3a:00:27:9d:fb:33:df:20:09:82:ea:b1:58:47:
8b:c2:3d:0a:8d:ee:a4:6f:87:f3:e9:67:81:ce:2a:
70:e6:60:b1:b8:67:05:a8:a9:04:fe:3a:3f:b5:63:
04:f6:c5:8b:5c:b8:9c:b5:b6:7e:73:48:f1:33:34:
6c:9d:c4:55:b3:8e:56:48:50:93:67:12:2f:20:3c:
aa:49:8d:e9:46:24:2f:8f:c5:4c:c2:2e:5c:9b:31:
97:db:5a:64:87:32:d6:59:44:cc:6c:1e:97:0e:fb:
2c:1e:1b:61:20:10:fd:91:4d:60:2a:22:1f:0b:31:
44:49:29:3c:1d:61:9f:e9:bb:32:b1:47:f3:3c:96:
d5:08:bf:96:e8:25:df:c4:5d:f9:f2:49:36:a0:fa:
26:9a:cb:4c:fd:1c:0a:1c:62:84:1c:9c:c1:a8:da:
1e:4f:ca:3e:cc:36:07:ad:74:fe:85:bc:06:92:1c:
21:0a:e5:51:e0:7e:fa:6b:68:18:3d:34:04:42:dc:
61:17:33:43:6d:8e:93:d4:0b:44:e4:ec:cf:a1:91:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:6D:66:6C:0B:53:F7:0C:0F:34:7A:1D:4B:A6:D5:CD:E7:95:14
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:74:d0:49:9f:57:e1:50:cf:62:de:40:dd:2c:60:9c:1d:
9c:d2:cc:50:64:c0:d4:43:6a:20:d5:74:ac:ab:ad:26:d8:0c:
87:8a:3d:01:02:46:ca:40:ba:2b:fd:e9:45:6f:95:ac:f7:ed:
f3:bc:42:4f:31:5e:16:25:a7:c3:19:50:81:2d:05:2d:2f:e6:
34:f0:82:f6:92:01:17:50:39:04:8f:44:93:63:5e:2e:2c:18:
20:03:19:e7:6c:a5:34:28:09:c9:8f:05:1a:be:7e:9b:8c:88:
d9:8a:89:4b:de:84:b5:30:16:22:96:18:fc:03:bc:11:a6:1d:
a3:9b:1c:48:a3:0d:10:e6:7a:0c:32:22:49:4e:10:1f:bf:bf:
fe:20:7c:5c:85:21:19:36:bf:4e:39:1d:7a:45:32:10:8b:f3:
8a:e8:c8:dd:7f:e7:48:11:62:18:9c:26:a4:53:65:e0:0e:3d:
ba:b7:01:2e:98:d2:5b:b2:e7:ba:89:42:b0:eb:fc:be:04:bf:
7b:6a:cf:66:8b:cb:a4:d3:d6:f6:fb:bc:97:21:d4:53:2b:9b:
1d:bd:b2:52:c3:a6:26:d3:70:8e:d6:73:50:37:fb:1b:28:d5:
a5:f1:4d:e3:a1:61:cf:ba:48:83:29:af:f3:d4:42:31:84:24:
8b:f0:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:01 2025 by rpki-client