Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: xWGGDiN2W5blAMEREv1sJxq3BPiizPk7mR5VBn82dKE=
Subject key identifier: 36:A4:EC:DA:4C:F1:D7:D9:BE:19:CF:BA:5D:3F:50:88:5A:85:B0:A1
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019A17612B42557866E05C3D2C477A37DEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0D99
Signing time: Fri 24 Oct 2025 18:00:35 +0000
Manifest this update: Fri 24 Oct 2025 18:00:35 +0000
Manifest next update: Sat 25 Oct 2025 18:00:35 +0000
Files and hashes: 1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: 5DNmgp9HTvG7f2AxWaNu/1nJvU7bXQKkJ7cAymmWTJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:2b:42:55:78:66:e0:5c:3d:2c:47:7a:37:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Oct 24 18:00:35 2025 GMT
Not After : Oct 25 18:00:35 2025 GMT
Subject: CN=36a4ecda4cf1d7d9be19cfba5d3f50885a85b0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:a0:e0:86:a4:49:5e:93:cc:e7:cb:c1:7e:
2b:86:83:26:23:fa:d0:09:b0:08:5f:6c:14:13:97:
d5:1c:b3:87:55:29:ba:87:cb:bb:35:e1:ae:14:e5:
e9:14:70:f1:14:19:ed:3d:db:29:05:0f:16:87:91:
2e:17:f5:28:03:a3:c2:09:b1:18:a3:5c:1d:7e:7d:
b5:54:6c:c0:57:a8:8c:c4:ba:18:28:d0:06:ab:8f:
1c:e0:d0:36:a6:f6:d6:60:dc:c5:91:69:2b:75:f0:
07:67:4a:a4:69:74:51:f8:1e:2f:50:69:f5:22:19:
0d:e8:8c:f4:00:0a:ef:7d:45:61:1c:1f:4c:1e:23:
4e:3e:dc:98:a2:31:0b:6b:27:29:53:13:a1:cf:7f:
83:e6:13:c6:01:22:e6:7a:1b:ab:4a:f2:a1:5b:66:
1e:d4:4a:0b:82:d4:4f:6d:cf:f7:58:ec:cb:e7:e2:
07:da:f8:9c:f4:49:33:cf:1a:61:c9:b6:77:dd:74:
18:e6:05:6d:1e:f6:da:a4:27:bf:a1:63:b4:89:87:
0b:50:9f:85:90:fe:b4:fd:60:d9:3d:49:35:73:a1:
ca:0c:ca:20:a4:ce:ba:fa:ec:19:0f:22:a5:5a:5d:
9f:7a:48:74:1f:20:bf:dd:a8:41:d1:84:10:2f:8d:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:EC:DA:4C:F1:D7:D9:BE:19:CF:BA:5D:3F:50:88:5A:85:B0:A1
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:06:dc:c5:7d:c9:db:cb:5a:db:8f:e3:c2:2a:a7:41:ea:b9:
12:10:b3:a2:62:67:93:60:00:61:23:d5:69:c2:b7:80:e7:cb:
b2:33:5d:bd:9c:ef:96:2b:13:e1:c9:1a:b6:3b:e3:6e:3e:e7:
38:3d:29:63:60:e4:fe:4f:6d:a9:09:d0:1e:2a:bb:18:9a:29:
56:a2:6c:55:54:35:62:47:5f:e7:61:8e:57:0e:ca:6e:bb:b3:
59:ec:34:c9:b0:79:a5:31:c4:26:85:5a:91:9d:dd:9c:78:d4:
0d:b9:c8:bc:b4:47:84:97:7e:e6:e1:ed:6a:d0:0b:ee:c8:38:
8c:7e:87:1e:32:e6:e2:89:e5:4f:7d:0a:6d:9b:9a:e3:81:48:
59:ee:de:bc:32:07:82:de:be:54:77:fd:47:0b:af:49:23:b0:
ff:6b:8d:ca:db:03:33:11:36:e4:e6:7c:f7:44:46:10:a5:a7:
97:bc:34:5b:8b:79:6b:ed:66:40:5e:48:9b:7d:b7:a0:0e:54:
f1:29:39:7d:74:57:8a:c5:d4:21:b4:34:ee:40:1d:12:7f:f5:
96:fb:2c:0b:fd:ec:db:15:97:93:3f:aa:f5:ac:40:d1:c4:c7:
72:73:97:1f:ad:ec:da:f1:a1:b6:27:50:d8:ef:15:d5:94:78:
8b:90:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:12 2025 by rpki-client