Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: lEA7ODvXjTdSp7OMwfAoUEPlBgZeIdjc+rFHwMf25fY=
Subject key identifier: 0C:CB:6F:0F:7B:E7:8D:90:5D:D5:ED:7D:0A:F4:98:3F:80:5F:65:E7
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0199221EADE5DB501835CAC4867E9E65CECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 0642
Signing time: Sun 07 Sep 2025 03:00:59 +0000
Manifest this update: Sun 07 Sep 2025 03:00:59 +0000
Manifest next update: Mon 08 Sep 2025 03:00:59 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: NsMl5VSpfIkEsl/leXAWitAXZm0243qq86At4o+aews=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ad:e5:db:50:18:35:ca:c4:86:7e:9e:65:ce:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Sep 7 03:00:59 2025 GMT
Not After : Sep 8 03:00:59 2025 GMT
Subject: CN=0ccb6f0f7be78d905dd5ed7d0af4983f805f65e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:ae:b4:1e:fe:46:48:5e:14:00:bb:9c:fb:
22:5c:05:16:70:53:88:ae:d8:31:91:c0:9a:86:f1:
34:e1:9b:a6:a1:94:1a:63:ae:28:ab:8b:8a:09:69:
18:d7:41:ed:32:1b:dc:d6:08:a3:64:a1:82:1a:c9:
0c:4b:ef:43:b2:bf:1a:89:2a:1b:de:3b:6c:e1:e0:
19:82:ea:6c:69:17:32:4d:84:23:a8:f8:41:a1:ca:
31:a8:d1:60:4f:99:f9:08:97:5e:66:00:53:95:83:
1a:a6:83:b3:b1:f0:ee:92:3f:80:0c:00:63:f9:23:
8c:b7:f4:3f:d4:96:c3:7b:50:c5:ae:58:bc:93:9c:
d1:e8:24:4c:7b:ee:14:41:94:b1:2e:3e:91:9e:55:
12:a7:b6:a1:92:f6:4f:ff:d5:4b:5a:f3:5d:8a:1e:
47:9e:d1:a3:26:38:4c:51:6f:7a:f5:c7:d6:27:6c:
81:85:c9:02:8c:88:2a:ce:1c:1e:40:46:d0:ae:58:
26:48:06:cb:ab:9f:8b:c6:26:67:95:da:4a:46:f2:
df:7d:50:7e:bc:a4:47:09:e7:11:3f:59:27:e8:6d:
a9:c9:cc:70:0a:94:73:ff:4c:e7:fd:74:5a:c0:44:
cb:22:dc:ae:f9:a8:79:7f:d8:fb:93:91:7f:a4:57:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:6F:0F:7B:E7:8D:90:5D:D5:ED:7D:0A:F4:98:3F:80:5F:65:E7
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a1:27:d3:85:27:5c:5c:6c:6d:69:80:7a:0c:dc:5f:d4:91:
3c:a9:ed:0c:d6:31:39:8b:27:e6:1e:1c:f5:0f:50:a4:1b:7b:
f4:be:5d:71:72:d5:0e:30:c2:89:eb:5e:98:ac:b0:08:91:24:
d3:47:ee:0d:3c:ad:4f:00:94:e6:7d:5a:2d:80:5c:4b:b0:3a:
9e:0d:a7:f0:c8:79:cb:c7:c2:09:64:cc:d6:19:b9:4c:39:6a:
14:d8:27:5f:8e:ae:4d:aa:0d:44:b2:1b:0e:9c:f4:12:78:10:
f7:0b:eb:00:6e:ed:6f:f6:c3:40:b7:41:9d:ab:9b:af:1e:88:
dc:2b:a1:4c:25:bc:f1:17:d1:4c:3d:1e:43:79:6c:7d:80:2c:
1d:78:b4:4b:4f:cd:6a:c2:f8:5e:c1:2f:90:e0:b9:aa:4b:f3:
dc:c5:dd:56:b7:45:76:6d:65:7b:e3:2b:93:34:c4:99:e6:fe:
80:94:d8:18:5f:69:93:17:bb:b8:4b:59:f3:cc:57:a8:67:e5:
7e:79:79:7a:fa:2e:49:c8:31:81:8e:f2:e3:9f:06:9a:af:38:
45:c8:9a:aa:26:10:8d:71:65:40:4d:61:b3:ac:5a:7e:81:42:
d1:c5:fd:f2:12:e9:5b:95:3e:2a:7b:af:26:2b:09:81:2b:63:
6d:3b:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:59 2025 by rpki-client