Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: uJdAvw1ZGhOR3SnXt56e7M1W20A0a33J3AA7mohYx7w=
Subject key identifier: 38:20:43:72:BF:6F:0D:B7:E9:E2:A9:BD:0E:9F:77:99:60:0D:58:B5
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 019A7225EC4A83577444B1E8D92B37E6A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 06F0
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: IYITdfQXp0d/JfRjpUcVSEEPBM5Mkly3ooDGzvBcd+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ec:4a:83:57:74:44:b1:e8:d9:2b:37:e6:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=38204372bf6f0db7e9e2a9bd0e9f7799600d58b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:37:2b:6e:44:e9:f8:23:bd:cc:22:b0:47:
71:c1:a1:be:04:ea:81:52:0b:b0:20:87:3b:8f:13:
fe:c2:a9:30:b3:b0:62:55:0e:7c:56:0f:b6:f7:ea:
db:09:7a:12:0a:be:cd:a8:c9:3a:47:0a:a7:8e:cc:
1b:7e:bd:f2:6a:31:9f:90:fa:c4:ab:b5:0f:41:7a:
fb:35:70:9e:a1:31:75:2e:57:f8:a5:2d:f5:50:c1:
eb:37:d4:60:a3:d0:68:d3:d4:c5:1b:0c:c4:26:6b:
f3:a0:f0:7a:d0:50:8f:7f:69:85:b8:68:ed:9e:37:
e8:55:3d:bc:cf:c9:c8:3f:4a:e8:7c:8f:94:d3:05:
ca:2d:56:7a:92:1b:72:23:eb:f1:ef:df:05:6e:69:
c7:44:28:8e:c6:96:5a:97:04:7e:7c:f4:19:f2:30:
b1:ab:d9:4d:55:e7:81:ca:83:3f:87:8c:df:31:8b:
ba:8d:bc:f6:47:49:d6:67:c2:fd:5b:11:65:78:5f:
17:34:44:02:3f:31:44:35:70:88:69:e2:09:d5:26:
e8:7d:f0:5e:4d:2f:58:50:e3:c7:42:89:b7:c4:30:
b1:d7:3b:06:6d:47:78:c2:93:8d:bd:c5:d7:38:64:
0a:39:fe:75:bd:ef:c9:37:d4:7a:b4:33:d5:71:0f:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:20:43:72:BF:6F:0D:B7:E9:E2:A9:BD:0E:9F:77:99:60:0D:58:B5
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e7:bb:31:0c:04:78:38:dd:95:5a:2b:e0:de:a6:88:c5:92:
bd:3d:d2:45:63:43:47:75:a9:e1:e8:20:5f:6c:d7:db:0c:7c:
70:c9:fb:80:f3:cf:46:c2:01:46:47:8f:96:8a:5b:ad:11:4f:
11:86:fb:41:c5:70:fb:55:a5:60:e1:2f:07:33:b7:49:75:35:
86:9f:f0:fa:d6:42:a3:c7:68:58:46:ce:87:cf:fb:7c:a8:89:
2b:fa:e7:4c:4d:ab:5d:16:d9:96:9e:bd:42:0c:37:dd:5a:98:
70:a2:4f:e8:da:6c:4f:6c:7f:f4:a0:38:a9:09:a4:98:8d:c5:
11:d1:73:df:24:b8:19:f3:dd:33:7b:09:30:5b:2a:d3:14:b8:
63:dc:fd:4b:71:8e:8d:bb:e8:07:35:e5:df:b6:dd:92:6a:82:
49:94:65:41:15:d0:69:ad:ff:aa:24:fc:f0:40:06:84:39:c6:
cc:f4:72:16:5b:ee:96:10:7f:5c:f4:4f:3e:01:c1:e6:30:f1:
d5:0c:ee:14:51:cc:35:de:a2:d2:b2:ce:8b:47:9a:94:87:30:
50:9a:79:85:5b:14:60:10:de:50:f0:88:5c:89:a9:09:6f:2f:
f2:a8:f1:a7:7a:5a:af:2e:9a:e2:41:f6:5d:b9:e9:42:c7:0a:
2e:84:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client