Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: vIqiqK5TVu2fmgLwcZ5WkhQzcnP4yNgUZUgnLmUzsn4=
Subject key identifier: 10:F1:AD:18:DE:2D:A6:2B:A6:93:20:F1:E5:AA:4C:7B:17:3D:10:94
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019A270B5CBBBA3561D778E2E65CA3B680E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1700
Signing time: Mon 27 Oct 2025 19:00:47 +0000
Manifest this update: Mon 27 Oct 2025 19:00:47 +0000
Manifest next update: Tue 28 Oct 2025 19:00:47 +0000
Files and hashes: 1: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
2: kNjtAZnBIdDs69zL_sxo5b2kvsE.roa (hash: ZvUWHB49abkoN+508ycB2Kcm14s8kB/R0ioTMdmzGbc=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: FoHyS55nFnKuM5g0NeLV6ABbc6rzFyjDswnsE9i7UgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:5c:bb:ba:35:61:d7:78:e2:e6:5c:a3:b6:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Oct 27 19:00:47 2025 GMT
Not After : Oct 28 19:00:47 2025 GMT
Subject: CN=10f1ad18de2da62ba69320f1e5aa4c7b173d1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:c0:92:b9:ae:43:e6:73:20:ae:51:e8:6e:
62:22:0b:a2:e4:8d:13:96:4c:9b:3e:3b:7f:19:5c:
65:70:88:30:e2:eb:78:8e:95:b5:d7:81:a3:15:0f:
7e:0a:bf:2f:28:4d:a6:e3:89:b5:3c:3b:82:87:52:
ad:bb:34:ba:22:ba:23:ac:19:51:b9:e7:1d:5a:71:
e0:d0:e5:48:1c:e9:bb:17:27:7e:6d:99:cb:e9:fb:
6f:a6:ec:f3:c0:5b:8b:af:c2:1b:d3:06:69:52:55:
4e:3d:4a:19:4f:89:c4:a2:a6:15:20:0d:48:b6:93:
66:19:db:ff:82:3b:86:ef:4b:f0:c1:af:62:e3:32:
f1:71:01:7a:f8:69:3f:e0:fb:49:93:30:bf:f3:06:
75:4b:61:60:64:f1:dc:66:27:65:24:2e:2e:e7:a3:
78:79:3f:cd:50:8a:5e:32:ea:32:c0:dc:58:4b:c5:
e4:5c:5b:f9:bb:c2:15:f4:b0:97:11:d7:b8:0c:06:
33:f1:5d:fc:ff:0c:6f:87:33:70:12:36:92:ac:23:
cd:5f:e4:98:f0:12:23:74:6d:ce:27:60:9c:e9:9d:
17:f4:64:76:dd:8e:43:9d:ce:ba:37:a9:be:f9:8d:
51:1b:8d:b1:64:84:af:cd:63:c6:87:dd:05:64:b7:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:AD:18:DE:2D:A6:2B:A6:93:20:F1:E5:AA:4C:7B:17:3D:10:94
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:e1:f1:6e:aa:0d:68:f9:88:b7:45:a1:b3:63:68:ba:78:
0f:51:a3:68:c3:75:36:a5:b9:1b:b7:cb:56:2f:64:91:0e:d5:
b1:9f:a6:b7:16:ab:20:88:75:78:fb:58:a1:d6:63:27:ff:3d:
69:b1:86:4a:9e:49:32:47:f1:ee:d6:07:73:7e:6d:61:8f:52:
df:d1:59:93:dd:a5:a6:d4:05:4d:d6:5d:c3:80:08:aa:a1:77:
a9:59:44:f6:bf:ff:57:cf:28:e1:27:3e:86:0d:b4:ca:08:a8:
18:b7:8c:75:26:08:fd:42:7a:8d:1a:30:d4:be:d9:ae:97:d5:
a7:fa:0e:92:c5:61:59:58:4e:61:5d:63:07:42:8d:a3:9a:fc:
26:41:59:3c:74:6a:81:84:71:25:aa:79:6b:ab:78:99:b2:b9:
f6:d4:ca:7f:03:9d:11:fc:70:a4:d9:79:66:f0:4c:66:77:fb:
9a:07:77:1a:67:f4:93:53:22:41:ad:d5:a6:df:f4:7f:ef:3f:
3d:59:50:19:a4:9a:19:3b:7a:cd:13:0e:1f:5c:80:78:48:23:
25:9c:1e:1c:e5:e7:fe:05:ee:30:2c:85:26:1e:07:cc:34:18:
2d:9a:68:10:91:ea:68:85:e0:c2:fc:57:6a:04:2c:45:a0:88:
c5:b6:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:01:55 2025 by rpki-client