Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: vogA56WXpn+sQEPkfzXie6yz8CsIRVlF8JTvetlHHdc=
Subject key identifier: C9:11:5B:D6:64:FA:7B:D4:6A:BC:96:EA:CA:AA:9A:2D:F6:26:0F:4E
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 0199FFC8D73CE90BEC71A8134AC912C1E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 04:02:56 +0000
Manifest this update: Mon 20 Oct 2025 04:02:56 +0000
Manifest next update: Tue 21 Oct 2025 04:02:56 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: vbzG5oN8C8fCVo20b6198YfabjjVVuMKz8TyuAUhRXE=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d7:3c:e9:0b:ec:71:a8:13:4a:c9:12:c1:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Oct 20 04:02:56 2025 GMT
Not After : Oct 21 04:02:56 2025 GMT
Subject: CN=c9115bd664fa7bd46abc96eacaaa9a2df6260f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:00:8c:df:94:39:15:95:17:fa:2f:3c:11:
10:db:65:c9:4b:7a:01:71:05:aa:b4:75:a4:14:e1:
7d:d0:a1:4e:c0:bf:be:e4:c7:cf:c9:6a:33:37:9a:
02:15:27:00:8d:b8:97:e4:90:76:0a:d4:8e:a2:08:
7b:be:60:e7:6f:ec:61:21:61:b6:3d:69:af:b2:26:
a0:64:42:82:a1:5b:12:8b:23:45:d8:9d:8e:6e:ee:
a8:d8:9e:16:0a:ea:92:90:40:78:9e:62:95:d9:15:
e6:67:ad:9a:d4:ec:d7:b1:ea:d9:ca:6a:2a:6f:a6:
8b:f3:97:db:e7:cd:4a:dd:34:29:82:ed:ec:2c:31:
60:99:42:cb:d1:07:ef:29:a6:96:16:57:28:fc:87:
28:83:e1:03:4f:38:3f:73:73:38:dd:59:aa:b8:b6:
f1:6d:06:51:35:31:90:a5:0d:0a:cf:39:9b:b8:54:
53:0d:16:2b:e5:ea:ac:14:96:aa:db:07:92:5e:c2:
87:0c:9e:c3:1e:f4:48:55:b4:93:68:86:38:05:f6:
7a:14:e5:fe:05:2e:7e:77:f6:8d:64:9a:aa:24:c9:
54:35:6f:10:fc:ab:42:7e:4f:c5:a4:b9:1a:7b:c4:
ec:86:7f:08:ab:89:fe:d5:69:a4:1d:d8:07:d6:e8:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:5B:D6:64:FA:7B:D4:6A:BC:96:EA:CA:AA:9A:2D:F6:26:0F:4E
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:43:86:f7:26:6c:a7:64:95:a3:84:3f:1e:78:dd:ea:0e:
16:ba:fe:f3:c7:17:c2:10:4c:40:4c:e8:f9:5f:b6:4c:6a:93:
d5:40:ec:6a:d7:a6:be:ce:3b:db:7d:ae:ea:a1:ea:bc:7c:cd:
c3:b5:9e:96:2b:b0:5f:1f:08:0e:7c:be:38:9e:6d:47:1c:b5:
fc:71:71:06:ee:41:0c:eb:d9:e0:30:23:a6:b6:d1:45:f1:b7:
a1:6a:a5:d2:b0:ca:f6:2a:7d:7c:2c:3b:22:31:9d:14:0e:68:
98:ec:f9:a1:6e:61:ed:4c:a0:97:ae:af:e8:1f:b7:d7:ac:89:
3a:0e:2c:2f:ed:00:65:1c:cf:a3:fc:7a:e5:00:9b:95:c5:03:
a3:ed:4c:50:a5:af:2f:71:73:99:e8:a3:ca:fc:9b:07:69:fb:
99:05:bb:97:1b:74:ee:33:d2:55:d4:ef:d3:1f:54:df:ae:09:
7a:54:f4:ba:65:4b:66:2a:a6:97:f3:01:c6:f7:9e:fc:d4:3e:
a2:12:88:01:d7:f7:17:e3:0c:b2:27:ae:5c:f6:71:fe:25:33:
f8:4a:05:96:65:d1:3d:e2:88:a8:b1:2c:1c:98:03:52:c5:24:
22:c5:81:cb:fc:79:ac:de:91:34:96:31:32:d8:9a:cd:90:9d:
bb:0e:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:39 2025 by rpki-client