Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: kru6LOjvavApQsutg6h2/ofv97VICGcONnd/LV9nuMU=
Subject key identifier: D2:68:06:DE:18:66:02:2E:64:99:D3:62:E1:60:15:AE:B2:41:B1:C7
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 019A2D43E9A05A2D3B5CCF98A99FD6856978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 39
Signing time: Wed 29 Oct 2025 00:00:16 +0000
Manifest this update: Wed 29 Oct 2025 00:00:16 +0000
Manifest next update: Thu 30 Oct 2025 00:00:16 +0000
Files and hashes: 1: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (hash: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=)
2: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: RONnxqnXoxXfsKcZ5exFpz3YMlvTXnWlLZppEwd8iw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:e9:a0:5a:2d:3b:5c:cf:98:a9:9f:d6:85:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Oct 29 00:00:16 2025 GMT
Not After : Oct 30 00:00:16 2025 GMT
Subject: CN=d26806de1866022e6499d362e16015aeb241b1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:67:b7:7b:6e:bc:14:03:4a:e1:bb:f5:8c:
2c:80:52:6c:4c:2a:09:8f:cd:9c:ad:32:40:a0:fe:
31:43:64:a9:47:73:eb:bd:9a:14:0f:8b:64:14:4d:
a6:13:09:5c:18:12:37:a6:e6:7d:44:30:8a:74:2e:
b5:42:10:a2:35:06:68:4b:53:52:15:fb:17:73:c9:
a2:14:0e:d4:dc:d0:f8:33:bf:60:f0:fd:40:04:64:
9f:c3:67:94:6e:1b:57:25:a5:1c:3a:0f:e8:37:53:
a8:3f:67:d5:a3:67:d8:db:14:37:16:e4:af:fb:b8:
57:43:34:c2:f3:11:69:b0:ba:d6:90:d4:23:b1:bc:
a7:cb:b5:fd:44:72:66:e7:62:36:09:24:19:8d:b4:
f7:bc:9a:82:ee:81:ad:81:24:d3:c6:53:79:00:b1:
80:27:0b:09:8a:fc:59:3b:9e:f0:c1:03:2d:c8:6d:
ee:e4:b2:68:83:0d:69:00:f5:d4:f7:be:3b:8a:6e:
5f:d2:94:98:a8:9f:86:77:50:0c:6d:ef:70:47:56:
75:21:15:34:07:fd:d5:af:d2:3e:d3:e1:17:4d:3f:
76:71:cd:0f:5f:b1:c6:3e:d6:a6:47:5d:d0:ea:e6:
c7:78:56:09:17:05:7c:b5:53:41:09:76:bf:72:22:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:06:DE:18:66:02:2E:64:99:D3:62:E1:60:15:AE:B2:41:B1:C7
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:df:66:e9:87:10:7e:92:1d:5d:a0:b8:45:32:74:c4:c9:
10:c2:30:0f:ec:07:1b:51:92:46:85:6f:3c:80:e9:6d:b0:cd:
b3:be:d6:1f:c8:fb:03:3c:14:84:bd:17:47:cc:8f:e8:20:2d:
98:80:49:fc:b7:98:32:f3:2f:3e:b1:c3:d9:09:47:4f:c2:06:
f0:c3:55:cf:a2:7f:69:15:99:f2:ce:34:ff:cd:bd:a8:20:f0:
e6:a3:b4:1c:43:3b:41:22:e7:3c:78:3a:d7:26:13:5a:86:22:
e5:2e:ff:a7:e6:01:a6:58:37:89:16:04:49:61:5f:c1:3b:20:
53:71:98:6e:08:3e:62:fd:4a:51:c5:e9:34:3e:6d:a5:f5:28:
af:cd:0e:3e:0b:3e:fd:32:c7:53:84:60:b2:c3:d7:85:3a:52:
f4:9d:9d:43:2b:c9:d8:1a:af:63:7b:b5:fa:9c:57:0f:3e:6a:
d1:a8:5d:35:29:9b:21:dd:1e:51:11:39:8d:5c:a0:2a:b8:58:
a8:90:d8:8d:b3:d5:dc:1a:42:e1:83:6a:44:41:01:1e:b5:7e:
5e:37:d4:23:94:ff:76:36:70:69:69:6c:01:47:9e:ae:37:0a:
78:2e:9d:15:06:88:07:54:ef:2d:e3:c5:2f:68:27:fe:d9:62:
58:00:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:48 2025 by rpki-client