Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: 2guXh8NAOTTFE9lFOq0hRNerZt3temshtdAKnw9xLJs=
Subject key identifier: 13:41:D0:72:B0:ED:4D:D9:1A:E7:6E:95:B5:18:9C:8C:B5:12:52:B2
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 0199FCC627C0F4C419F82077FF23D566CE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0AE8
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=)
2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: CkDuLo6TZilHJRFlgeN6eb3gIePm1bZePyT6tRXK1pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:27:c0:f4:c4:19:f8:20:77:ff:23:d5:66:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=1341d072b0ed4dd91ae76e95b5189c8cb51252b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:fd:31:18:f2:b6:23:b9:42:32:39:49:0b:
e0:51:47:fa:7e:33:24:fd:48:5b:5d:a3:47:f9:7b:
4c:a3:b1:46:cf:7c:70:d5:27:65:38:f6:72:30:09:
f9:04:62:af:26:33:bc:83:d9:60:4f:47:4e:e6:e8:
42:75:98:96:d8:30:18:64:09:72:9e:a2:b7:2d:b4:
29:a2:47:61:b2:21:fd:9a:bb:3e:e9:2a:11:c6:52:
5d:64:e1:c4:5e:50:45:6d:2d:8f:ab:19:e2:96:cc:
fb:f0:1a:08:5d:91:3c:2b:80:64:55:f7:1f:4b:92:
e5:db:95:3c:51:2b:60:f6:20:41:55:f9:90:0a:72:
d0:a1:f8:b7:cd:51:50:f4:2e:04:75:e4:b6:4b:45:
22:6d:9a:1b:de:63:22:b2:3c:fc:d7:ca:5d:af:5a:
ec:56:4b:c9:3f:e2:c1:dc:fe:7f:f6:cd:fb:1d:75:
d8:95:56:68:8b:46:31:98:41:2e:6f:b6:b9:aa:04:
60:8f:eb:57:19:30:32:ec:9c:d4:f4:26:f8:45:f6:
bc:51:54:d4:70:90:5d:42:6f:16:bd:ed:6e:37:5d:
9b:3b:c6:70:ae:85:75:3f:92:51:e4:53:04:62:7f:
67:29:ad:ce:ad:6a:b5:2c:35:ae:9a:c4:51:ed:91:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:D0:72:B0:ED:4D:D9:1A:E7:6E:95:B5:18:9C:8C:B5:12:52:B2
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:02:db:f1:09:58:31:cb:5b:ad:eb:3a:38:f5:49:a2:6c:
db:d2:c5:e0:11:f4:a2:bf:52:de:48:d9:aa:15:e7:ac:60:ed:
8e:d0:c3:1b:e3:20:15:38:58:24:0b:8e:21:af:c5:70:5e:73:
1a:9f:b6:0e:82:ea:26:89:04:41:23:fd:dc:09:af:56:84:eb:
85:97:b5:af:b4:13:af:97:b6:db:da:d6:29:41:c6:1d:76:40:
0c:dd:32:c8:dd:1f:29:db:2b:41:84:81:a3:d6:7c:76:d4:e2:
f5:82:25:b5:e4:de:5c:f8:52:81:3a:eb:9a:1a:16:fa:88:7a:
a9:b3:d0:48:ba:8e:e2:3f:6b:70:a4:da:b4:42:a8:39:de:73:
f9:81:8c:4e:ff:2c:7f:0b:ec:ab:6d:7b:06:a7:b7:2e:06:10:
1d:f8:91:cb:aa:41:0b:bf:d1:00:3f:04:3e:cd:8e:f3:49:8f:
d8:b6:8a:25:37:29:22:03:6d:9b:11:27:6f:79:ab:0f:da:9c:
c6:b3:16:e6:08:e9:84:9a:02:42:21:c8:b0:ab:1c:c0:7a:3e:
a4:42:59:2c:32:e3:75:30:69:ed:11:1f:35:87:f9:56:e7:e1:
12:5a:f4:12:e2:18:a7:1c:17:fd:25:96:3c:a7:8c:32:96:27:
14:01:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:13 2025 by rpki-client