Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: hpyudTOjvDrIhfYqzJ4p6J1vopeNc3tzmm1Nufqq/RY=
Subject key identifier: 41:CE:AE:87:AB:7F:3F:40:D4:15:19:42:CB:F2:B5:69:B2:8A:9C:F5
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 019A251D008455F9EB57CF119384D1AFD735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1704
Signing time: Mon 27 Oct 2025 10:00:48 +0000
Manifest this update: Mon 27 Oct 2025 10:00:48 +0000
Manifest next update: Tue 28 Oct 2025 10:00:48 +0000
Files and hashes: 1: 1h6I7yathuhdvJgvI7zWaIqhF1I.roa (hash: eS/E0Xfzx+BcTRnP1WHF9rHrs364VBPb5lL4n4E58IM=)
2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: ooPN8xTM1WJgUrWGtqqcBzCkdTB8gLdHUmqadMH/ywQ=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1d:00:84:55:f9:eb:57:cf:11:93:84:d1:af:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Oct 27 10:00:48 2025 GMT
Not After : Oct 28 10:00:48 2025 GMT
Subject: CN=41ceae87ab7f3f40d4151942cbf2b569b28a9cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:a7:3c:22:d3:bd:62:a4:c0:57:84:d4:27:
56:49:27:05:8f:35:45:24:7e:5c:31:30:c9:62:b9:
1f:98:b3:ac:06:2d:3a:c0:42:62:17:ca:ed:f2:37:
39:37:ef:25:0e:a8:9b:84:5b:43:76:53:51:34:97:
19:00:e9:01:86:db:23:e1:60:cd:f1:3a:2e:a0:9b:
94:44:56:a6:05:f5:5f:00:d6:3c:31:2e:d5:89:b1:
0a:25:87:5d:67:10:3f:94:06:5c:94:7a:79:e4:b3:
a7:e6:19:42:ae:30:e4:d1:d1:f9:e2:60:b5:2c:c3:
cc:e2:8c:98:0a:07:75:79:7a:a6:90:06:30:99:0d:
de:f5:54:57:0c:96:42:e1:59:c5:58:e0:7e:fe:5b:
0c:97:65:43:80:e1:53:36:87:6b:4a:f8:63:52:c2:
d3:05:a1:43:01:1e:f9:9f:08:78:8c:e5:20:a7:e6:
16:09:2c:78:55:85:47:89:a7:26:bc:b2:fd:ed:82:
55:c7:58:92:83:64:2e:00:c4:6e:9d:36:32:03:06:
77:a1:4b:e9:33:6a:7c:43:cf:50:9b:2e:f1:c4:a3:
ce:ae:0c:1d:1c:8f:30:8d:2b:ba:68:4f:42:7a:97:
ff:31:15:dc:96:ea:29:12:b9:b4:93:ce:a0:a3:40:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:AE:87:AB:7F:3F:40:D4:15:19:42:CB:F2:B5:69:B2:8A:9C:F5
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bf:92:12:8a:30:5f:4e:20:c5:99:b0:19:17:4f:1e:63:4a:
5c:e6:be:ec:14:f4:48:11:c4:00:67:43:d4:2f:2e:90:1a:b6:
1c:68:8a:fe:0f:27:38:7e:2d:33:ec:61:82:20:25:86:90:a9:
56:93:da:f0:17:d7:0d:f2:6b:1a:52:03:00:c1:0f:87:8a:bf:
e3:ce:9d:54:d1:f1:08:d4:cf:db:86:f7:1c:85:90:8f:d3:d4:
4b:15:ff:05:af:ee:e3:32:cd:0f:7a:6b:8d:7e:0d:0b:66:03:
dc:e5:99:ef:ed:fe:e1:0b:c7:e3:c4:69:f8:a1:51:62:8a:b4:
57:e5:15:02:82:24:90:c5:95:50:57:e0:df:cc:ea:6f:29:5f:
84:c5:fe:46:e6:0d:78:1e:ec:a7:54:c1:c0:cc:33:38:fc:2c:
12:ff:1f:df:68:e9:ea:e4:cb:71:87:d6:eb:ce:23:27:42:05:
70:80:93:54:5a:52:ff:31:e3:26:0a:f2:90:56:e9:21:9a:65:
29:fc:53:e3:89:96:e0:03:e0:9b:a2:b2:ec:c8:c7:31:cf:45:
bd:82:82:93:4f:8f:e2:9d:99:06:c5:ea:48:1f:2a:77:ff:5b:
ef:2d:6d:bb:e6:fd:48:a1:37:e6:20:78:6f:2d:a9:f4:e0:a0:
3f:1e:53:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHQCEVfnrV88Rk4TRr9c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl
NDQ1MTkwHhcNMjUxMDI3MTAwMDQ4WhcNMjUxMDI4MTAwMDQ4WjAzMTEwLwYDVQQD
Eyg0MWNlYWU4N2FiN2YzZjQwZDQxNTE5NDJjYmYyYjU2OWIyOGE5Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY2nPCLTvWKkwFeE1CdWSScFjzVF
JH5cMTDJYrkfmLOsBi06wEJiF8rt8jc5N+8lDqibhFtDdlNRNJcZAOkBhtsj4WDN
8TouoJuURFamBfVfANY8MS7VibEKJYddZxA/lAZclHp55LOn5hlCrjDk0dH54mC1
LMPM4oyYCgd1eXqmkAYwmQ3e9VRXDJZC4VnFWOB+/lsMl2VDgOFTNodrSvhjUsLT
BaFDAR75nwh4jOUgp+YWCSx4VYVHiacmvLL97YJVx1iSg2QuAMRunTYyAwZ3oUvp
M2p8Q89Qmy7xxKPOrgwdHI8wjSu6aE9Cepf/MRXcluopErm0k86go0DvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHOroerfz9A1BUZQsvytWmyipz1MB8GA1UdIwQY
MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt
OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli
LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr+SEoow
X04gxZmwGRdPHmNKXOa+7BT0SBHEAGdD1C8ukBq2HGiK/g8nOH4tM+xhgiAlhpCp
VpPa8BfXDfJrGlIDAMEPh4q/486dVNHxCNTP24b3HIWQj9PUSxX/Ba/u4zLND3pr
jX4NC2YD3OWZ7+3+4QvH48Rp+KFRYoq0V+UVAoIkkMWVUFfg38zqbylfhMX+RuYN
eB7sp1TBwMwzOPwsEv8f32jp6uTLcYfW684jJ0IFcICTVFpS/zHjJgrykFbpIZpl
KfxT44mW4APgm6Ky7MjHMc9FvYKCk0+P4p2ZBsXqSB8qd/9b7y1tu+b9SKE35iB4
by2p9OCgPx5T4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:55:28 2025 by rpki-client