Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: xiXYbbOtQFyNQB37OqJ0vACOjpwp/K84DQfN1J/wT6I=
Subject key identifier: EA:B9:B6:7C:28:28:04:22:DB:AA:A6:09:B3:F8:37:8D:84:E2:AE:3F
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 019A19187DD95B80A039F803615EB36B1AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 054C
Signing time: Sat 25 Oct 2025 02:00:26 +0000
Manifest this update: Sat 25 Oct 2025 02:00:26 +0000
Manifest next update: Sun 26 Oct 2025 02:00:26 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: GFNd2WzsUC8sz0Phxue8xpgaPB1aFzupKALVf1Q2L5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:18:7d:d9:5b:80:a0:39:f8:03:61:5e:b3:6b:1a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Oct 25 02:00:26 2025 GMT
Not After : Oct 26 02:00:26 2025 GMT
Subject: CN=eab9b67c28280422dbaaa609b3f8378d84e2ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:a3:be:38:84:50:24:cd:6e:86:87:4e:27:
a2:c2:d5:b3:ed:d9:d8:2a:fd:5a:d2:91:6a:a8:4d:
73:16:de:94:37:20:03:11:59:4b:56:5a:d9:f6:7e:
12:1c:6a:e7:f2:32:f5:8f:e0:f9:fd:9a:b7:3f:e9:
b2:b1:dd:5d:1c:2d:ce:a3:9e:72:7d:c6:11:98:4c:
c6:af:20:d5:ff:95:3d:14:f5:58:88:5f:d6:85:1a:
41:d7:ef:89:0b:43:9b:1a:29:99:d4:6a:86:be:8c:
14:eb:05:b1:6d:94:00:44:03:c3:da:00:0a:50:bc:
60:b3:a1:5b:29:2f:1b:ad:2a:80:5a:b1:33:27:45:
7a:6c:86:88:14:70:70:c1:76:1b:76:ba:c6:be:66:
84:ea:87:ca:f8:09:32:05:f6:58:ac:76:f3:c0:61:
50:34:90:b5:8b:a1:6f:da:43:8a:95:88:5e:2e:4f:
f6:fb:75:b4:f7:4f:66:30:aa:bc:aa:0a:45:ee:1f:
96:20:27:93:77:ef:fb:37:bc:f8:cb:0f:3e:c6:b4:
1e:08:d2:7e:0d:2e:29:d6:2f:72:77:da:27:4d:05:
eb:6e:df:67:5d:82:a1:66:5b:af:c7:d6:16:15:03:
04:a1:e1:4e:6f:e0:10:b0:56:93:61:c4:68:03:0c:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:B6:7C:28:28:04:22:DB:AA:A6:09:B3:F8:37:8D:84:E2:AE:3F
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:02:3f:fb:72:0e:ef:55:e1:a5:c0:97:0e:e4:a1:35:75:5c:
fe:23:b0:24:9a:2e:6c:e4:f7:23:9a:d3:11:96:04:ae:70:d5:
49:18:29:32:92:9c:a1:e0:33:92:a8:76:19:e5:18:1b:cd:df:
b1:25:4e:be:6e:3d:89:b1:96:e0:39:f8:79:59:69:f0:10:00:
8f:b2:c0:18:41:bf:81:55:18:3c:4b:dd:78:54:70:42:09:30:
fa:d1:6a:7e:0f:9d:c6:df:df:c4:e3:d2:21:b4:62:3c:1f:0a:
4c:99:25:60:f8:ee:ee:56:24:c7:a0:4a:0e:48:2c:47:1c:a8:
58:df:5c:0c:d0:57:40:b0:af:b6:58:7d:36:58:86:59:2d:12:
2c:a7:36:e1:c2:87:9f:be:5f:24:c4:37:2b:02:b6:d1:62:2f:
ac:3c:d4:c4:5f:71:55:2a:4f:0a:ab:d8:6d:cf:15:81:21:0a:
b1:8d:7a:da:e4:8f:23:b5:ba:ee:dc:2e:d9:fa:c7:4d:a1:b0:
cd:97:b1:f9:75:1b:a3:28:13:d8:e6:3a:0d:51:1e:bc:fa:d8:
b5:d8:0f:cc:68:cb:17:89:2b:99:6f:6e:28:31:a1:4f:69:4c:
3b:ae:7b:74:a0:98:53:e6:6d:f8:d7:df:5f:3a:d6:98:2c:b3:
b6:49:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:44:21 2025 by rpki-client