Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: C9dGC8SuK4gicoohVL6Cmaex0q7yqubm3Gz15pibaJw=
Subject key identifier: 08:66:7A:97:9E:8C:4F:BF:BA:AB:2D:CF:77:0F:1F:5F:56:14:6C:4F
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0199FC583505A5D50F9FE9B1268092492BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0F01
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: o3kc0tqoltiAKwRHHQyfaVkxiH1/IDQhwIsoV7F6Sho=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:35:05:a5:d5:0f:9f:e9:b1:26:80:92:49:2b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=08667a979e8c4fbfbaab2dcf770f1f5f56146c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:c4:ec:a9:62:5a:d2:aa:87:40:4c:76:99:
a1:f0:f5:a0:da:8c:ec:aa:3a:b3:c1:02:c5:73:d2:
f2:5d:b1:ac:23:0c:c9:9d:47:0d:d0:61:e2:33:11:
f1:e7:52:82:e0:11:50:4f:b8:98:e1:da:df:f9:06:
b0:47:2d:a7:81:29:33:90:03:75:40:e8:83:d9:ca:
46:4f:b9:cc:cf:b9:bb:67:82:ca:bf:ed:ca:c7:ba:
f2:c6:aa:98:bd:29:65:7f:e7:e4:8c:dd:58:5c:21:
7f:aa:dc:ff:ea:ff:76:1c:a7:81:b6:d8:9f:b9:b5:
73:42:4a:8e:ab:9c:db:58:f8:e6:66:fc:33:5a:ea:
48:c0:e5:1a:34:39:ee:26:a5:cb:35:2b:e9:36:27:
1e:2a:90:9e:b4:39:1b:be:3d:bb:99:66:43:2b:89:
7d:83:20:79:1d:5d:45:0c:4d:b1:2f:7c:1b:3c:3d:
56:81:13:67:83:26:45:dd:a0:54:44:10:62:9b:6d:
ab:d7:48:7c:f9:bc:93:71:4f:66:f6:ee:6f:d7:c2:
97:f5:a3:de:e8:53:d9:a3:33:23:1d:55:39:43:7e:
7e:f7:97:87:07:70:3e:81:00:a8:26:77:7b:b6:9b:
26:f2:c2:0b:4f:b2:a1:fc:2e:c9:29:f0:02:76:d6:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:7A:97:9E:8C:4F:BF:BA:AB:2D:CF:77:0F:1F:5F:56:14:6C:4F
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c2:51:2a:c3:a2:ab:ab:72:87:00:6f:9a:d7:3b:c2:54:75:
22:2e:0b:ca:4c:f1:6d:2d:81:7a:f0:af:93:20:0e:39:cf:f4:
7d:64:41:ad:5d:6e:9b:6b:f9:fd:2d:00:38:62:7b:f1:85:aa:
84:a4:13:38:03:a6:65:e2:80:e4:95:04:72:c2:02:25:69:61:
d6:ec:cd:b3:cb:a9:36:4e:59:30:0b:f1:b4:87:52:e7:b2:34:
6c:f5:10:3c:bd:68:16:0e:31:68:24:29:26:2f:54:c7:e4:80:
68:da:e3:44:cb:97:eb:8b:b7:eb:69:48:2c:28:49:15:4f:6d:
9f:72:a5:b0:c9:4b:57:dd:42:de:30:dc:bb:d0:54:62:3c:71:
5a:ef:00:fa:44:39:83:04:5e:4a:67:e0:fa:07:e7:93:4c:bd:
b6:56:a8:37:fb:80:ba:1a:a7:4f:7f:e8:44:d6:75:e3:e9:cb:
9a:7c:01:fa:78:15:b9:d1:a6:91:fa:e7:ef:cc:22:9f:bb:f2:
f4:46:eb:e4:d1:6a:78:07:df:44:fb:d6:78:1b:7d:03:94:5a:
eb:90:02:f1:c7:46:42:1d:cc:56:ac:b6:b1:c3:a8:a4:2c:37:
19:0a:d2:e6:7b:7a:c2:89:fa:90:18:a0:d5:cb:8c:61:58:6e:
04:6d:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:48 2025 by rpki-client