Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: elED9at0g8T6YrqKLNVpXDBfpHcgQXt+vwtydjPe05Y=
Subject key identifier: AB:D7:9E:99:6C:E0:61:F3:37:87:FF:25:05:1F:4A:0A:2E:94:44:21
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 019A168596BC101E190C3D12130FE14E0DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0DE5
Signing time: Fri 24 Oct 2025 14:00:44 +0000
Manifest this update: Fri 24 Oct 2025 14:00:44 +0000
Manifest next update: Sat 25 Oct 2025 14:00:44 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: B2wSqu6tlCnqLEzkF3TsYgc/JY0c/HC8J46YrPDiBR0=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:85:96:bc:10:1e:19:0c:3d:12:13:0f:e1:4e:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Oct 24 14:00:44 2025 GMT
Not After : Oct 25 14:00:44 2025 GMT
Subject: CN=abd79e996ce061f33787ff25051f4a0a2e944421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:ba:40:61:83:1e:82:0e:49:bf:26:0a:29:
1e:8c:f9:1f:45:8d:b1:93:40:db:6c:8c:dd:e1:8a:
86:5d:b1:2b:ee:ca:97:58:2b:5d:c7:8a:84:4f:40:
cf:64:e9:af:5b:6d:21:61:26:19:60:63:d2:18:43:
41:dd:74:45:18:a5:70:07:f1:ac:53:2a:c3:60:1c:
91:a9:fc:50:3e:c6:ca:46:d1:89:21:9e:9c:15:8d:
89:b1:d9:83:f4:07:7c:6f:60:d1:21:66:8a:4d:f3:
d4:39:1b:7d:83:68:c7:de:d7:ff:f1:ac:3b:4e:db:
f1:b0:99:dd:f9:cb:17:b5:62:c9:55:b6:9b:a6:a1:
e3:ac:51:d6:0a:a0:69:8f:d2:95:5b:0c:94:2b:7b:
60:55:94:6a:3a:2f:35:2c:c2:ad:49:bf:14:e7:cb:
24:d8:b9:fb:fa:7c:9c:c1:3a:c2:a4:73:7c:72:5e:
e8:e8:87:6a:d6:3d:72:75:bb:c2:e2:4e:4b:44:4c:
68:25:eb:95:68:74:ea:82:9a:35:d8:b4:14:9a:69:
2e:85:1a:cb:0c:76:ad:25:d7:5b:20:f9:5b:a8:40:
75:86:a0:f4:61:96:78:f9:0a:cf:a8:d3:65:34:ff:
15:e1:d0:c7:fa:62:36:4f:4f:8c:0f:b6:66:b2:9f:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:9E:99:6C:E0:61:F3:37:87:FF:25:05:1F:4A:0A:2E:94:44:21
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ba:de:7a:14:ed:12:fc:66:83:d2:f0:3f:b9:55:8f:f8:65:
f7:dc:f7:29:0a:97:a7:7b:00:da:39:a5:b0:6c:3e:92:cb:7a:
58:06:e1:2c:db:73:ee:34:d3:dc:fc:66:36:78:bb:d2:cc:51:
ea:96:7a:40:37:31:95:fe:a5:00:71:f1:50:7d:88:e6:25:3f:
3f:d8:22:6b:78:32:4a:dc:38:6f:b4:85:46:1f:b3:5e:2c:17:
31:8c:9f:c7:2f:88:43:74:96:a8:07:7e:61:02:b3:ed:d8:05:
66:b0:d2:9d:97:b0:66:0d:7d:e7:31:a6:c5:39:94:13:26:21:
14:52:49:a5:c6:b3:3b:03:3c:29:b4:25:20:06:85:fd:45:f9:
ca:ed:9b:c4:51:34:16:1e:20:5d:fe:53:17:86:86:14:d5:1d:
86:f2:0c:8b:0c:f8:94:3b:03:b8:41:e4:fa:5e:0c:05:cd:ba:
63:d6:10:96:66:9e:f6:2c:fa:6b:ef:97:39:58:9c:84:ed:02:
98:d0:e4:05:44:b8:ce:5b:c1:8d:2c:0d:51:17:82:25:92:5e:
78:73:ae:64:0b:d8:bf:17:96:f9:86:ea:c7:31:f0:86:d2:3b:
c8:17:5d:00:89:71:17:2d:55:ae:86:ef:f2:8d:14:33:45:46:
ae:3e:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:16:56 2025 by rpki-client