Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: yG3piqY12rGf0qyijEFk6cl/2VS6Q7CIa5F0aOsO60U=
Subject key identifier: AC:3F:66:09:CB:9F:FA:F6:7F:74:40:21:9B:7B:23:00:6B:C5:93:50
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 019A1E758DC024E71F35822460563AC388E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 163B
Signing time: Sun 26 Oct 2025 03:00:11 +0000
Manifest this update: Sun 26 Oct 2025 03:00:11 +0000
Manifest next update: Mon 27 Oct 2025 03:00:11 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: bAeXHbMfc+G6FzU0kS5sXkyq7qbtUu0pfsB4P6fu4Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:75:8d:c0:24:e7:1f:35:82:24:60:56:3a:c3:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Oct 26 03:00:11 2025 GMT
Not After : Oct 27 03:00:11 2025 GMT
Subject: CN=ac3f6609cb9ffaf67f7440219b7b23006bc59350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:f9:0c:b7:72:df:b4:17:ee:21:20:a1:da:
82:26:e4:2c:39:18:09:02:e0:c1:da:82:df:96:53:
d2:3e:26:fd:ce:dd:ff:af:be:84:07:9b:5f:a8:d5:
0f:a5:60:40:a3:38:43:eb:7e:f6:eb:35:30:c2:13:
2d:72:9c:63:08:73:75:7f:a0:8f:e8:9e:22:07:bd:
16:ea:5f:84:86:ba:07:ba:a9:72:32:90:15:6c:56:
d9:95:1e:97:3b:10:16:38:65:49:02:13:d3:1a:f8:
0e:1d:10:37:95:e8:1c:f7:24:63:64:73:08:45:05:
25:ba:80:05:67:c3:7b:81:8a:54:1e:c7:60:c2:6a:
06:61:42:08:a1:1f:5b:ec:e7:1c:00:90:d5:2c:5b:
a6:95:ed:c1:2d:b4:9b:a6:0e:53:52:72:4d:a8:e2:
b1:ea:83:96:d6:a6:06:16:1d:e7:e7:5a:16:fb:e3:
ae:ec:88:e6:1e:06:d7:24:74:10:16:a0:e0:b8:e6:
a9:e0:e2:d9:9d:97:44:fc:70:d6:f5:3a:5b:da:b6:
e9:de:15:e8:32:d0:51:8b:38:e6:ae:5d:6a:d6:e1:
3f:12:92:83:1b:7c:a1:20:5f:04:cb:6d:79:eb:a3:
ec:58:1d:df:be:26:6b:8f:9f:bf:ea:2d:9a:6d:64:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:66:09:CB:9F:FA:F6:7F:74:40:21:9B:7B:23:00:6B:C5:93:50
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:41:57:fe:25:c5:45:95:4f:53:7d:4f:00:37:9c:8b:7f:db:
4a:c8:87:42:1d:cb:32:37:39:ee:e1:ca:69:c1:a2:d7:64:23:
b3:ba:2b:b9:72:e5:13:96:87:11:93:4c:6d:05:95:4c:4f:60:
a0:94:16:ee:79:79:69:e0:81:d0:1b:56:6c:70:94:66:c7:0f:
8c:33:96:09:72:87:73:cb:4b:6e:87:9d:39:b9:85:82:ce:c9:
d7:df:32:87:e4:c5:00:d9:d8:a7:8b:09:db:52:3c:67:7f:af:
71:cc:ac:79:7d:a6:58:5a:6f:74:db:bd:02:d2:67:22:ff:a3:
42:31:01:4c:4b:49:b0:62:52:0f:a0:3b:27:ca:5c:f3:53:93:
43:14:c2:2d:e2:e2:18:95:e4:dd:92:d8:18:d9:1e:ed:ae:a8:
89:6e:9a:34:e6:a1:3c:be:ee:de:43:20:fd:33:bc:32:e8:9a:
f4:ec:8e:7e:ce:f4:ce:e2:44:72:3a:5a:66:b5:85:09:f8:5f:
8b:e9:75:61:42:af:20:79:3d:8d:a1:e2:cd:db:1a:dd:d0:35:
74:de:d3:66:9b:70:49:df:0b:00:f1:c2:a1:05:64:82:a9:97:
1e:45:d1:67:a0:a2:bd:80:f8:2f:6a:fc:6a:cc:92:db:94:12:
ce:11:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:15:38 2025 by rpki-client