
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: EypJOzIIbWBqoaCO2XMNmXa3AUP+KaylmSZ92Dmu7hI=
Subject key identifier: EA:CD:2C:4D:2C:03:37:59:62:EF:FF:88:6B:A7:FA:A0:A8:9A:2E:28
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 0199FAD8471AA5C64DE2DD1F1EF3CB1102D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0BD3
Signing time: Sun 19 Oct 2025 05:01:41 +0000
Manifest this update: Sun 19 Oct 2025 05:01:41 +0000
Manifest next update: Mon 20 Oct 2025 05:01:41 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: WJiVMWsLBnCgcGH0LnqBeqFrI7Y0lPTAfjvFRpC++8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:47:1a:a5:c6:4d:e2:dd:1f:1e:f3:cb:11:02:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Oct 19 05:01:41 2025 GMT
Not After : Oct 20 05:01:41 2025 GMT
Subject: CN=eacd2c4d2c03375962efff886ba7faa0a89a2e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:e1:bc:dc:a4:c6:8d:59:34:9e:da:28:94:
78:4b:31:bd:da:ea:b7:ba:1f:a7:40:9b:59:10:55:
3b:74:64:cc:db:57:4f:db:1f:07:64:07:85:f8:74:
ac:19:54:e7:22:2f:94:d0:f1:f6:0a:cb:ca:59:53:
7c:48:b4:68:cd:73:53:40:9a:9e:8c:5d:51:7a:ac:
48:b5:46:6c:23:7b:ee:c5:7c:bd:d4:1b:ba:de:30:
b2:2c:4f:80:d2:c3:e5:02:22:af:28:6b:89:13:61:
23:ee:31:87:03:f3:32:46:0c:0c:12:35:8a:c1:f9:
5f:7c:e2:9a:38:e0:e1:c7:48:f6:82:5c:1e:ab:21:
e2:03:51:af:23:31:99:06:39:9f:41:0d:80:60:8e:
a9:d9:9d:a0:77:6c:8c:da:12:a4:f8:25:8d:45:16:
11:86:c0:d0:68:d3:c1:37:3f:f9:b2:ac:6f:a3:14:
37:95:1e:a3:a7:27:5e:18:2a:36:e6:12:6a:2f:29:
3f:06:10:98:d6:d6:3c:25:9d:cd:6d:25:97:56:4c:
9b:97:1b:a2:5d:a9:dd:05:00:c7:f1:6b:3f:ec:24:
c8:d4:ce:ba:7b:58:04:30:5f:ba:82:11:ee:df:d5:
c3:ad:85:74:f1:5b:c8:5e:4f:99:15:27:1c:ad:c0:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:2C:4D:2C:03:37:59:62:EF:FF:88:6B:A7:FA:A0:A8:9A:2E:28
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:47:b9:f8:99:ef:9f:e0:fb:12:b1:4a:c4:a9:12:99:23:
44:e8:67:31:96:1a:0c:b3:7e:0e:6f:03:b9:26:bb:c2:b5:55:
4d:13:de:b6:07:ba:7f:46:0e:c0:b5:65:e6:0f:42:42:05:92:
ba:88:c7:76:e2:9b:63:c2:fe:33:85:e4:85:0c:b4:95:ba:65:
9e:f1:06:8e:c7:9a:0c:06:a6:bb:cc:d3:cd:fe:13:be:6f:39:
63:50:a3:f8:07:12:b4:b8:11:6e:a8:9f:fa:aa:e2:ce:b5:60:
1f:d0:47:1e:18:2c:cc:11:40:3f:7e:5c:aa:70:d4:85:ac:4b:
f0:b2:0d:b1:21:62:a9:97:f5:39:fe:f4:94:cc:2d:38:e9:93:
8a:67:6c:a0:ec:0a:62:bf:b0:fa:33:c8:a1:51:67:72:29:ec:
2a:cb:a8:39:f4:c1:d4:09:aa:52:76:25:0d:5e:e6:e2:ef:7a:
56:92:34:05:6f:97:4d:2c:b1:2f:1a:a2:04:05:f2:18:74:7b:
33:66:16:86:bb:77:59:4c:69:54:ed:0f:89:b9:77:24:a9:bd:
b6:f3:b9:4e:f3:16:e5:22:2a:b6:fa:74:cf:01:2d:0a:88:c9:
ae:b0:dd:e0:a9:c2:76:d3:2c:10:92:5c:a6:ae:f6:1c:40:f6:
74:3c:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:47 2025 by rpki-client