Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier: QZ6kCBwVaZQzbEFxRWOwQkY4rHXmrmyC3wsWLma4jZc=
Subject key identifier: A9:BD:1D:7A:CC:8D:65:B0:BE:E7:B2:20:21:51:A3:40:EC:84:EB:9A
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 0199FC8FB207C542E0E583AE8DF88F7C880F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number: 0722
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: QeHcNxb7wTP7AUVPNo8Be/EhRH0j4v9e9jczboESLck=)
2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b2:07:c5:42:e0:e5:83:ae:8d:f8:8f:7c:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=a9bd1d7acc8d65b0bee7b2202151a340ec84eb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:a9:c6:e2:58:c8:d2:49:43:c4:08:2a:5a:
e4:42:d6:5a:d7:8b:9b:5a:2a:6b:8d:ec:ab:0d:50:
14:34:98:7d:77:d9:df:17:dc:67:7c:84:d7:5f:70:
29:29:12:7e:1a:0d:0a:cb:b5:0d:7a:26:f4:98:bc:
ad:d9:46:2b:56:84:5c:34:f3:bd:ee:00:0c:74:f1:
91:02:0a:88:eb:9b:c9:3c:8e:e2:dd:c5:d2:f4:02:
7f:a8:7a:0c:87:cf:54:3b:ad:0e:c3:4a:d3:a0:99:
48:f1:10:e8:a8:57:2e:9e:58:d1:cc:f6:89:41:d5:
6a:b2:2a:b2:58:9e:8b:58:71:be:f0:b2:57:25:82:
57:38:f8:ef:64:4d:bc:25:7b:26:d7:a7:83:9f:d6:
d7:92:c0:20:96:25:61:a8:68:2c:85:f0:fb:bb:1b:
8e:8f:16:7d:28:37:cf:ac:7d:4c:13:6c:6d:ea:c2:
0c:d7:68:be:ce:e9:e2:33:75:df:1d:bf:68:64:4b:
fd:21:32:fe:46:40:95:23:e4:74:67:94:4b:24:9a:
64:04:60:00:dc:6c:01:b1:05:94:92:41:a6:c8:49:
0f:d0:6b:fd:72:8f:97:40:5b:87:1c:06:5e:b6:27:
e6:82:1b:2b:fa:bb:12:04:ac:3c:36:72:6f:b1:c5:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:1D:7A:CC:8D:65:B0:BE:E7:B2:20:21:51:A3:40:EC:84:EB:9A
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2c:6f:70:c6:eb:be:ab:e1:95:0a:6f:60:80:bb:56:49:98:
8c:b5:7b:79:db:8f:55:8c:7c:ce:fc:1e:87:9e:ce:d3:19:4c:
d9:4d:03:17:21:fd:9d:4c:c2:f6:bb:6d:ab:0b:c4:10:65:3a:
89:74:12:92:dd:4b:02:ff:d1:92:62:ed:fb:7d:89:54:95:cb:
ee:a8:2b:e1:68:bd:17:f8:c0:8c:0a:56:c0:64:cd:28:d9:25:
2a:35:fe:f8:ec:18:c5:23:50:db:d3:71:26:41:97:fa:dc:c0:
3b:dc:fb:23:a8:a9:c3:2f:76:b1:6c:20:d1:6e:15:96:43:9c:
e3:c6:21:8d:04:5e:54:4e:cd:fa:88:10:de:98:26:b1:e0:bb:
bf:e9:fe:77:d8:9f:1d:94:45:15:c1:d7:0d:61:a1:07:23:93:
92:db:da:74:e5:fd:a6:67:df:15:da:d8:c3:ed:ae:02:e4:d0:
e3:db:94:48:f7:dc:93:b3:ed:40:0d:45:89:e5:1a:eb:47:55:
e2:1d:3d:01:6d:1c:fc:64:a7:ad:56:00:f9:a0:e1:0d:bd:78:
f3:fb:be:be:f0:c0:14:db:de:d2:c1:ee:dc:93:c4:75:a4:90:
a3:e0:56:42:ef:ed:04:30:4e:49:c2:19:0c:de:1b:82:c2:ae:
95:ec:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:09 2025 by rpki-client