Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json)
Hash identifier: rJb2OKggBM11UFyHfncK/OGaaE8h1zOQ3n5VB2Ye7yg=
Subject key identifier: B3:F4:46:62:B9:98:B1:2E:68:0D:16:2F:1C:26:CF:F5:C8:16:FD:95
Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Certificate serial: 0199FBEAD958E033A189113E4291ED5DA615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
Manifest number: 01AC
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: 9Rl0BbPzjGtJ5SxKkQlNSxcKRIA.roa (hash: wlrYCSoZjr9jkjpsQGaOjVzZDExzEHE+3MSzP3WRJC0=)
2: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: AcRygLKqRrHZYF6s80IPQygfslRl79ZeYCwryuk8l1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d9:58:e0:33:a1:89:11:3e:42:91:ed:5d:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=b3f44662b998b12e680d162f1c26cff5c816fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:9c:78:b2:d9:8a:15:27:07:7b:e0:76:e7:
3d:4a:06:28:34:7e:97:ec:e5:39:ae:6f:b5:56:51:
aa:f7:6d:f3:66:3f:28:5b:ea:ae:57:ab:68:37:97:
9c:99:b7:70:6f:39:09:d7:c2:30:1b:e2:35:1e:bf:
b0:ac:97:0d:0a:40:31:20:3e:da:c8:48:68:3b:3d:
0c:2f:c6:e6:50:6d:bc:c7:b1:88:b8:eb:91:09:14:
a1:8d:b6:05:b4:e8:db:4e:49:2f:e6:32:52:87:f0:
71:87:53:48:15:2a:6f:23:07:6c:fc:2a:1b:ad:a1:
b6:b9:71:1b:5d:80:45:ee:4e:44:13:83:34:2d:a2:
1a:9c:98:11:36:b7:c4:d0:6e:3a:f4:36:ad:c4:02:
d8:87:33:0a:1d:68:dc:f9:ad:1d:2a:85:0c:01:2c:
dc:cb:b2:be:8b:f8:43:32:58:23:73:7d:82:35:83:
fa:f6:9f:8b:32:ca:a1:9d:9c:f7:57:f0:75:11:7d:
68:26:b1:7c:d0:46:3b:7c:fd:62:d2:b3:8d:7d:c6:
a5:f5:fe:7c:85:10:4f:6a:59:22:4b:e3:6a:6a:db:
08:e3:23:ae:61:9e:6d:34:8d:42:fb:88:1f:69:22:
3e:58:8e:f1:9d:60:7b:31:c3:fc:5c:d2:5d:97:6b:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:46:62:B9:98:B1:2E:68:0D:16:2F:1C:26:CF:F5:C8:16:FD:95
X509v3 Authority Key Identifier:
keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:35:19:cf:c8:5d:2c:76:96:c2:1f:37:05:74:af:67:23:
42:70:fe:f9:3d:13:7d:7d:06:d3:9d:96:16:60:c9:38:df:f0:
3c:09:93:ef:3f:db:8c:ac:96:b4:c4:45:8a:ec:2d:07:4d:a6:
68:a4:8e:b3:45:ba:42:bc:d0:14:a3:ef:31:d8:14:86:b7:e6:
d9:25:29:54:d0:41:ba:e4:1c:0f:50:f7:60:67:14:77:87:d0:
22:3a:6e:33:41:68:ec:07:14:95:41:5c:1d:bf:2f:bc:28:47:
45:4f:49:bb:ae:05:6b:da:ea:e6:b6:26:47:fa:6f:41:8d:ec:
53:d5:06:bf:ee:5a:00:9c:d3:28:8b:2f:43:c1:01:c4:6c:65:
c9:ff:12:46:50:f4:ea:a7:d1:de:d8:54:85:2c:51:d2:26:4d:
ff:bb:b4:56:80:7e:c5:c0:bb:46:b8:7d:4b:11:45:fb:a0:27:
db:47:c6:db:91:8a:38:74:72:f5:ab:ce:84:15:e8:f0:bd:e5:
c8:f2:59:e1:9d:dd:bd:e8:ea:91:7a:b0:8a:df:ae:18:a7:eb:
13:db:b1:b8:aa:2d:fd:b4:5f:46:53:2b:a0:25:d6:96:c6:76:
7f:fc:de:8e:7b:43:71:7a:3a:29:25:f8:7a:8d:5e:63:ba:98:
24:b9:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:58 2025 by rpki-client