Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: n8WKTNjJIyYvKtBrlMrhy9xx5Kx8CqpNGmiDZvB+Hy8=
Subject key identifier: 46:05:C4:79:5D:93:EC:AC:76:1F:4E:60:B4:FF:47:74:5E:B8:0B:3C
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019A236542FC9F134176186248A3B7A71BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0B33
Signing time: Mon 27 Oct 2025 02:00:30 +0000
Manifest this update: Mon 27 Oct 2025 02:00:30 +0000
Manifest next update: Tue 28 Oct 2025 02:00:30 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: z1EwMf6APEZF5JqE4LxT9dBKNAKfcgdlF1Kktj6nQJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:42:fc:9f:13:41:76:18:62:48:a3:b7:a7:1b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Oct 27 02:00:30 2025 GMT
Not After : Oct 28 02:00:30 2025 GMT
Subject: CN=4605c4795d93ecac761f4e60b4ff47745eb80b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:59:da:bb:5f:db:99:55:0b:3a:c6:78:9a:
c6:17:17:31:f6:bc:cf:67:3a:ca:5a:18:63:e6:58:
36:81:0d:e7:bb:8f:76:0c:fb:70:d6:2f:1c:cb:fc:
e1:2e:61:b7:f3:4a:71:30:46:bc:ee:13:c2:fb:05:
16:fd:6a:73:5f:70:f5:5b:e8:c4:4a:d8:1f:53:e4:
7d:e6:5d:1f:13:52:22:25:28:b0:b8:33:18:1e:07:
06:db:3c:06:fd:b8:86:8d:7e:e2:75:15:32:e7:dd:
a1:9e:ef:b0:ef:41:36:48:d7:ed:18:cb:74:1a:e2:
40:cc:28:6f:75:8f:41:31:b0:2b:dd:eb:be:9e:e6:
9a:97:f1:0b:6f:c5:6d:92:86:86:32:8c:23:7f:34:
c5:e3:40:c0:1b:f3:99:be:84:fb:a9:f3:b0:91:93:
d4:7c:20:3b:c2:c0:1e:77:9f:9c:47:b1:79:8b:9a:
78:d0:41:f4:9d:79:83:a4:e0:95:fe:ac:33:75:9b:
60:23:4b:5a:8c:ef:8b:89:17:4b:12:b1:b7:be:63:
61:eb:d0:16:02:2a:5f:61:84:b2:2a:0a:12:e4:de:
6b:91:23:7f:30:9c:01:45:9c:d4:67:09:be:aa:e3:
89:98:57:c4:27:e9:35:fc:b0:05:b7:ad:e6:84:a1:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:05:C4:79:5D:93:EC:AC:76:1F:4E:60:B4:FF:47:74:5E:B8:0B:3C
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:7a:7e:b2:9b:ce:61:9b:9a:f6:da:5b:74:f5:e9:03:9e:
92:ee:a7:3b:aa:f9:79:81:07:f8:8d:c8:90:97:9c:95:45:1c:
42:3d:f1:c7:63:c9:06:d7:ed:66:a6:08:da:a3:a2:ef:a9:9e:
3e:96:01:da:68:84:6a:ff:f6:1a:56:6d:f9:30:a9:b8:3e:cd:
a1:0f:7a:e6:d7:d1:7d:d3:f4:b0:6c:70:24:ac:56:f5:ec:e9:
ad:ea:50:b5:fb:4b:71:79:6e:30:86:4b:2e:83:77:48:2f:26:
3e:a3:5d:52:a7:21:ae:16:91:67:c3:ba:62:f1:4f:8e:fd:23:
0e:d6:c9:19:ff:e4:0e:20:c1:1a:f5:42:2c:24:b6:88:9b:56:
81:ce:61:91:22:d3:b6:52:65:9f:02:f5:c1:36:a9:d5:94:63:
b2:0e:05:69:d6:37:be:db:bd:80:bf:6a:c6:2c:05:90:92:ed:
3c:01:fc:be:cd:e3:d1:b6:6c:a4:44:16:6d:1e:75:01:d8:8f:
5a:48:ea:e3:ec:bc:72:df:5f:ab:7e:08:ba:44:9d:7a:83:ba:
f3:3a:56:8f:ba:91:32:b7:99:0b:d3:6a:f0:6c:71:02:cc:28:
43:83:eb:e6:da:9a:f9:0b:eb:d8:0f:1a:ba:67:fb:24:e3:f0:
52:25:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:27:54 2025 by rpki-client