Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: nP4jeRzVgOA/LnhsZop2zTlNTTGMRqrhX+izSQQHfXw=
Subject key identifier: A7:7C:5E:FF:5C:76:04:05:D8:62:AC:9A:E1:69:71:50:0B:61:54:7B
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 0199C53332A602E7FD9FA85374F05D7472A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 01D0
Signing time: Wed 08 Oct 2025 19:01:30 +0000
Manifest this update: Wed 08 Oct 2025 19:01:30 +0000
Manifest next update: Thu 09 Oct 2025 19:01:30 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: ZYwcCMuFINJosZhChY+EOiXButQgqiEqdHJx6tlnGks=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:33:32:a6:02:e7:fd:9f:a8:53:74:f0:5d:74:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Oct 8 19:01:30 2025 GMT
Not After : Oct 9 19:01:30 2025 GMT
Subject: CN=a77c5eff5c760405d862ac9ae16971500b61547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:3d:76:e3:ea:d3:43:72:ca:c0:2c:9e:a4:
2c:dc:6e:87:ab:c9:91:ac:44:d8:d8:07:84:6e:78:
8f:f1:6f:e7:79:f1:a7:01:d4:31:28:97:33:5d:78:
e7:21:fd:f1:82:eb:be:4f:b2:bf:9c:ed:4b:84:37:
04:a1:43:01:f3:e2:6a:cc:f1:82:5d:3d:da:a8:ec:
10:07:42:aa:75:1e:61:f0:0e:b1:72:90:42:aa:6e:
40:59:29:0d:03:d3:19:b2:f0:61:71:23:7f:27:f3:
2e:ef:2d:b5:69:00:de:04:23:fa:ab:13:34:93:95:
27:eb:15:1d:6c:c2:9f:16:88:9a:fe:b1:81:fb:bf:
a8:29:82:9a:fa:d1:80:6a:7d:88:ee:66:94:c3:97:
ad:82:fb:17:c7:c0:0b:59:66:c4:c3:b2:f5:ea:dd:
b7:1f:b2:2b:bd:36:e3:a9:19:bc:f0:14:be:bc:ad:
60:7f:68:0e:1a:5a:b5:62:aa:d3:18:22:e8:c8:30:
58:ba:36:5e:a7:08:2f:95:41:80:14:9b:bd:48:19:
c4:43:ca:7d:22:1b:53:cd:ee:95:88:4f:5e:57:85:
f5:dd:e0:9b:4f:eb:d9:71:50:95:52:e0:83:e1:40:
01:2c:a6:b5:29:02:bd:34:c9:09:db:4f:82:ab:9d:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:5E:FF:5C:76:04:05:D8:62:AC:9A:E1:69:71:50:0B:61:54:7B
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c2:17:08:b6:80:74:e8:0d:bb:46:fd:93:42:ed:ec:9a:73:
76:0d:21:ca:93:a3:1b:87:4d:fc:0c:f9:96:b4:a5:da:9e:28:
a0:e7:bc:1b:9f:78:4a:d8:a9:84:9b:3b:cc:88:cc:12:78:67:
df:23:7e:95:b9:3e:5d:c1:7c:ae:41:b7:be:fa:68:8e:7b:ef:
39:85:8e:93:3c:af:5e:88:a6:6a:ab:69:85:d5:34:78:40:88:
56:92:d9:f3:9f:b0:d9:d3:2e:e5:ab:80:1f:c3:94:17:6d:5c:
86:7d:46:d6:cd:c6:0f:20:bd:23:f6:2f:ea:5a:1d:dd:d6:59:
41:f9:4c:aa:bd:8f:94:8a:e9:9c:ca:79:c3:8f:36:ab:cc:04:
86:00:de:a9:fb:0f:11:6b:06:10:2e:54:56:78:c8:f5:bc:08:
d5:d5:0f:55:3d:b9:f7:7f:33:fa:e1:1f:26:36:90:07:ef:dc:
c2:f5:17:2f:fc:84:1f:58:a8:ad:6e:23:2b:7b:0c:2f:a2:a0:
87:9a:ff:3c:ca:7a:36:f3:27:7e:87:71:5f:b3:4d:8d:dc:f2:
6d:82:31:21:c5:28:a6:e1:ae:9d:d9:95:98:02:a7:0c:8c:bb:
7f:8d:a4:80:20:9b:02:dc:ef:15:d5:8f:ed:a3:3b:b5:52:e8:
27:02:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:53 2025 by rpki-client