Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json)
Hash identifier: pbk82zetc8jP0NzxRt3yKWCf2hdHnKu+b6IEGIXv2dc=
Subject key identifier: 26:2D:82:89:AA:7A:15:8C:68:15:A9:C2:D3:A5:89:5F:C0:C0:4A:8B
Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Certificate serial: 019A73385E957175255AF29997714324A422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
Manifest number: 017A
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: 169cGaxV6a1CkYyNZ9lTilNkAqTkRmTceKqiBcvtTkw=)
2: S8TepbiQXeRCqnwRb_Kf4gbokA4.roa (hash: Z/Vh03WpNWn3U5M6zjyjL69BpjSHNYWSMdO+UDP54Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5e:95:71:75:25:5a:f2:99:97:71:43:24:a4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=262d8289aa7a158c6815a9c2d3a5895fc0c04a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:3a:79:29:79:ac:0f:7f:ff:d9:b3:90:60:
8c:c6:5c:18:d7:53:18:ef:27:f9:6d:1c:4c:7d:38:
f0:d9:e8:df:80:76:c6:7a:bf:e6:67:67:d9:1a:75:
30:fe:63:71:97:bb:d9:7a:5f:a9:13:a3:e2:35:eb:
8e:86:56:ea:60:01:4f:d9:07:02:57:a9:86:1c:6a:
64:23:bc:6c:7b:db:11:c6:c1:b7:92:8b:2f:2b:e6:
6d:c8:e5:2a:33:92:a0:45:f9:9b:ea:36:7c:c2:fd:
32:d3:85:bd:68:24:a3:bc:02:01:58:ed:af:a6:c2:
54:6b:7c:d9:88:34:b6:a6:4e:7d:e9:b1:12:1c:3d:
e2:68:53:d7:c9:1f:3a:97:b1:b0:ca:f0:89:2f:f2:
77:03:f0:7c:25:ee:89:99:e7:ce:0e:e2:5e:64:66:
b1:aa:21:1a:20:e1:18:e6:49:2c:2c:63:88:ac:43:
c9:7c:98:ee:34:a7:44:8b:b1:cd:b5:e3:65:46:79:
d6:d5:8e:54:4f:92:74:24:3a:a8:66:1d:f6:9b:28:
eb:ab:57:d9:74:9a:a6:53:90:56:a2:dc:66:0b:ca:
04:c4:47:ff:c8:a2:fa:64:75:63:4c:8c:80:f5:b9:
00:77:d8:c7:27:f5:0e:e7:58:01:7a:b5:3a:d6:ef:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2D:82:89:AA:7A:15:8C:68:15:A9:C2:D3:A5:89:5F:C0:C0:4A:8B
X509v3 Authority Key Identifier:
keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:9e:08:61:da:53:d1:7f:d0:14:43:9a:83:c0:b4:68:9f:
84:1d:66:a5:d4:d5:5a:f5:a5:26:e0:68:c8:73:8f:23:f0:7c:
bc:96:09:d5:f3:82:65:16:fe:6a:83:ad:1a:cb:e6:28:e1:32:
51:01:8f:40:42:60:d3:b5:2a:86:a5:d9:50:56:99:3d:4c:a1:
f9:06:40:70:ea:c9:c8:07:7b:e6:76:d6:be:e9:62:fa:b0:4f:
93:b4:fe:74:cf:3f:2b:42:e3:b4:39:b6:8a:4c:4f:a6:1d:1a:
74:27:2e:dd:33:1e:4f:b4:27:27:4a:f2:5e:71:ef:69:27:67:
8e:d6:2b:3d:5a:c4:f1:68:8b:f4:67:a0:90:5a:8e:db:7b:23:
53:36:8c:87:1e:13:eb:da:4d:4c:ce:a1:7a:7a:46:25:99:e2:
da:8e:96:b5:79:d5:34:48:67:74:7e:79:91:30:6f:2c:d5:77:
fa:9a:c6:f6:f4:22:3b:fe:19:6e:58:4d:7e:92:26:b3:f8:a9:
2c:af:cf:f0:6d:be:65:c3:2b:c9:64:dc:d0:62:d5:45:73:b7:
64:aa:c4:ce:17:74:3c:3e:56:21:be:96:d0:a2:47:ba:59:ec:
50:a2:2b:b4:22:c3:a1:6f:c6:4d:f9:d1:27:54:bb:01:30:4d:
59:7e:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:07 2025 by rpki-client