Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: SUlPYhTRrV6IehganBijvgpYLxhYBni8/6ODnlyKEvI=
Subject key identifier: 1E:33:3E:8F:1C:5E:0D:41:57:AC:B2:C3:73:AC:8B:BF:4C:4E:B7:CB
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 019A2FA054B71BC1E8A7649873FAB3753FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0FFE
Signing time: Wed 29 Oct 2025 11:00:27 +0000
Manifest this update: Wed 29 Oct 2025 11:00:27 +0000
Manifest next update: Thu 30 Oct 2025 11:00:27 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: XcnreA15i0cn8nDHRmTU5tUCofJqTKKLUAYqjmeUL5c=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:54:b7:1b:c1:e8:a7:64:98:73:fa:b3:75:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Oct 29 11:00:27 2025 GMT
Not After : Oct 30 11:00:27 2025 GMT
Subject: CN=1e333e8f1c5e0d4157acb2c373ac8bbf4c4eb7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:51:3a:70:55:6f:87:95:10:2f:4c:9f:ff:
53:2a:a4:b1:4e:c7:8b:3a:08:13:ab:6e:3c:20:2d:
c7:1b:d4:90:2f:64:12:21:81:7b:ee:0b:cd:7b:3e:
50:6a:3c:be:c5:d2:55:c7:57:03:95:08:da:8e:53:
e9:50:70:96:95:85:52:5d:a8:c1:01:77:c0:3d:6a:
cf:98:54:33:1b:c6:b6:1f:80:5f:ac:58:8a:53:18:
fa:d1:ed:6f:2d:ff:53:f3:c4:11:de:cd:ef:45:a4:
fd:8a:1c:56:77:ae:ed:44:0b:67:89:0b:8b:11:0d:
8b:e1:52:d1:34:eb:47:c6:73:b5:87:34:a3:71:5a:
31:90:3e:d8:9a:a8:be:b5:b1:3b:60:03:be:33:ea:
45:57:4d:15:92:b3:1e:56:d6:e5:7a:66:0b:94:ab:
b4:33:19:a0:1d:89:59:cd:5d:ce:ed:e4:93:90:df:
1d:f1:d0:82:39:7f:ad:4f:bf:e6:9c:a8:b9:85:94:
07:78:0c:1f:7d:8f:bc:c1:b6:ee:eb:ce:93:4e:88:
ec:9d:7b:74:90:38:76:98:eb:39:2f:86:e7:ad:42:
d1:a5:5c:94:0f:8e:d2:1f:1a:dd:f3:e2:32:c1:fd:
23:a8:78:9e:73:b5:3e:3a:7e:30:76:1d:3d:c2:09:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:3E:8F:1C:5E:0D:41:57:AC:B2:C3:73:AC:8B:BF:4C:4E:B7:CB
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:97:86:8b:2c:60:62:79:ba:ba:8b:2f:f4:f2:2b:c8:df:08:
16:df:ce:2b:30:dd:ae:56:8c:47:1d:52:fe:b2:43:2a:c1:10:
cc:e8:d9:f2:e4:3a:f6:d8:c6:3d:6d:24:be:37:13:77:4c:b3:
42:14:0c:1b:33:08:4f:08:0e:62:6d:43:d6:92:f8:8a:f2:eb:
ec:85:2d:f3:95:63:d8:2d:9a:41:3e:e3:36:98:9f:80:e5:2e:
09:b2:7c:ba:e0:5f:bd:2a:bf:e9:d4:03:35:a3:9c:77:40:3a:
20:f6:2b:de:47:5e:b3:df:d9:1c:3c:9a:aa:dc:04:5f:80:c6:
d9:aa:64:2f:f1:18:bc:6a:fc:16:6a:6b:3a:b5:33:36:60:8b:
42:a2:9f:dd:46:91:cc:9a:06:91:15:a6:29:07:9e:1a:6d:ab:
07:65:53:75:46:8d:27:70:64:9d:d9:56:02:ec:1c:49:93:a0:
ca:3d:4a:00:fd:d6:34:13:0d:80:6f:2c:93:11:e6:f9:c4:e0:
ed:f8:18:a2:cc:bd:74:0c:c3:0b:09:c7:61:5f:3e:8f:b9:61:
64:68:e3:92:76:50:90:e3:24:f6:83:67:40:31:62:2d:73:ea:
15:7a:47:0c:15:fa:6f:51:6a:70:05:5e:b3:5e:69:26:0d:7a:
30:aa:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:49:20 2025 by rpki-client