Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
File: rXz7zh1tOmok8lZSBl0xV1go7bU.mft (raw, json)
Hash identifier: +ZeIXW28+GupINDzwFXjaYyRL4PQWGpgPpJBCN2p0Tg=
Subject key identifier: 19:30:D1:27:41:9E:ED:F9:7F:97:42:33:5A:85:9D:E1:AD:A7:EF:FF
Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Certificate serial: 0199FBEA8E923ABE26083FFD3EB0470349C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
Manifest number: 0DF3
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: Im3NuoFQdX7egdBojqG76hMiXq0.roa (hash: MBZCzXbY6/6xAtTJ9sYOEhNyw2Jnz8TgfEJHylhcfdM=)
2: rXz7zh1tOmok8lZSBl0xV1go7bU.crl (hash: au0JwS/KGOxNtgrg3qB6fbR6c5LM2m+1nsPMbDUxB1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8e:92:3a:be:26:08:3f:fd:3e:b0:47:03:49:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=1930d127419eedf97f9742335a859de1ada7efff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:c0:12:c0:b0:9c:1a:c1:eb:3c:4c:90:ac:
9b:28:75:50:27:77:ba:3b:5e:39:91:79:35:c8:ff:
8e:58:b4:a1:9a:ec:5e:8c:ec:7f:0c:9c:02:9d:8a:
f4:84:3c:c5:4e:14:4f:11:d8:1c:b7:d2:bd:2b:b6:
58:f9:ff:df:b7:e8:d5:84:2a:c3:e6:25:71:c3:31:
66:2f:08:d9:b4:e6:35:21:0b:d5:e3:54:3b:17:79:
5a:c1:d6:9f:5f:07:44:09:f4:79:7b:be:bb:37:38:
ab:23:3d:50:a1:17:76:34:46:e8:06:2c:db:d9:9e:
a1:f7:0e:08:f4:fd:3a:70:50:7b:94:6b:64:7e:c0:
bd:de:91:02:f1:bd:da:49:ee:86:49:6e:ef:75:6a:
79:ae:b7:39:d0:f5:4c:65:68:1e:9f:01:af:73:0f:
9d:b1:a0:17:79:63:3b:5b:4b:55:e8:27:55:d9:6d:
d4:d7:ef:09:4d:4b:b1:61:95:9b:3c:0a:bb:f7:12:
ff:3a:27:c5:10:42:8e:37:69:f9:03:1f:c0:a1:67:
43:95:14:01:de:42:ed:d2:64:31:61:a8:bc:6d:db:
9f:f7:f0:01:03:9b:10:ca:68:71:a8:72:7a:da:98:
3f:f4:7d:a5:dc:7b:d1:30:19:22:ad:55:66:41:db:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:D1:27:41:9E:ED:F9:7F:97:42:33:5A:85:9D:E1:AD:A7:EF:FF
X509v3 Authority Key Identifier:
keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cf:58:c1:c5:32:e4:9f:9d:83:8b:0e:52:79:a9:ae:ea:c8:
f0:b1:a1:47:a6:ae:fc:78:6a:5a:58:e2:f3:26:08:16:52:d1:
95:b3:4a:c8:d7:f9:51:ac:bb:12:ad:e5:53:32:c8:0d:7b:b2:
74:f6:dd:88:34:0c:89:3a:0f:28:49:de:7d:12:57:e3:61:44:
1e:cb:ef:b2:41:d0:1a:16:e1:d1:cd:72:4d:d3:01:32:7e:9b:
4f:a2:23:1d:cd:f6:b8:56:cf:ba:12:fe:5d:01:c7:6a:ba:2b:
80:1f:83:23:98:02:68:21:ac:3e:e7:d7:2b:ef:9f:ac:22:96:
40:4c:c4:4c:4d:16:56:f1:76:69:10:4c:41:22:56:90:16:1f:
38:f1:85:12:4d:c5:19:72:aa:2a:bc:1d:c0:ad:6f:50:e8:f9:
a3:cc:1c:ea:5b:e4:4b:ec:09:f9:3e:9c:f7:16:e3:7e:d0:a3:
3c:b5:22:7e:08:8e:d8:09:ec:69:9f:08:0b:08:41:7d:4d:6b:
3d:14:29:4f:54:c8:68:98:3d:05:eb:82:be:d8:e5:95:54:15:
50:6a:72:d6:c7:8c:91:f8:93:f7:1e:a5:13:ee:8f:a9:15:e8:
82:ac:aa:36:90:86:bb:3b:d2:5a:d1:43:c1:1a:ac:e7:df:86:
d2:1d:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:35 2025 by rpki-client