Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier: q9qn7XjLQYmZ4eXSwRJ1VIkc4CAbXc8fJR4VLzeoExs=
Subject key identifier: 1D:36:08:9E:8F:80:47:B0:51:68:65:3B:C6:28:49:AB:4A:33:74:2D
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial: 019A134D4BEC655757808560673B71E26E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number: 5A
Signing time: Thu 23 Oct 2025 23:00:23 +0000
Manifest this update: Thu 23 Oct 2025 23:00:23 +0000
Manifest next update: Fri 24 Oct 2025 23:00:23 +0000
Files and hashes: 1: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (hash: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=)
2: mzUvfgVLoqjl_Pu4e_7hdH0g4tQ.roa (hash: nM7KewQVEjtLO/Upjj+aZLO5RewYm9AF+8kFiREJ2Jc=)
3: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: LfjnMFDSrWV/umwZ+g63EbZ04ybOlOKQbgbpq2LNHdE=)
4: uAH4xPc9AhtK2Uy6SZDxCuii3xg.roa (hash: 7Lk71krqRJUVDRdcZl5XdOrWogQR7yqjHZ+KkfQmj9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:4b:ec:65:57:57:80:85:60:67:3b:71:e2:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
Validity
Not Before: Oct 23 23:00:23 2025 GMT
Not After : Oct 24 23:00:23 2025 GMT
Subject: CN=1d36089e8f8047b05168653bc62849ab4a33742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:1c:35:76:55:04:dc:eb:92:38:83:cd:77:
16:94:d9:97:f8:4a:79:92:c9:0b:36:3e:1c:89:7f:
73:88:e9:84:ec:62:0a:63:1f:15:3a:9d:2b:8e:7f:
ef:76:9c:d4:e3:e5:65:ec:1f:5c:97:1b:17:76:5a:
8a:85:d5:d8:a3:c5:a1:32:b1:24:82:28:dc:c5:a9:
95:80:83:91:59:41:f8:94:8e:66:2a:06:37:90:eb:
2c:e8:b8:e0:35:e0:66:4a:7a:33:11:cf:28:7f:30:
89:17:43:18:8c:26:50:77:a3:af:e4:30:b0:a4:b5:
4f:2c:98:f0:81:28:0c:ef:5b:ee:db:a7:e0:87:2b:
80:6c:6e:5f:45:0b:7e:fa:2e:c9:cb:e3:e8:4c:e2:
76:63:4b:80:22:3c:a2:1a:12:22:5d:93:de:0b:97:
4a:36:ae:f7:0c:0b:48:12:25:d8:f6:c2:b9:fe:59:
12:51:a7:08:fc:24:8c:7e:40:9c:00:c6:4f:88:98:
43:ed:14:a6:20:57:6e:76:ce:51:99:0f:bd:66:44:
a5:98:f5:12:25:01:8d:fd:85:9c:ff:18:06:39:aa:
15:a3:7f:48:79:42:76:58:f3:2c:26:c1:4f:7b:9b:
49:cc:ec:53:e1:50:78:a7:8c:24:f5:da:82:01:13:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:08:9E:8F:80:47:B0:51:68:65:3B:C6:28:49:AB:4A:33:74:2D
X509v3 Authority Key Identifier:
keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9a:ba:ea:f2:ac:40:07:14:05:cf:5c:5d:c5:83:0d:2f:a1:
40:09:e2:7f:cb:84:e9:48:01:57:9a:91:dc:a4:a0:51:26:c8:
9a:4d:12:06:65:30:48:f1:fc:d8:cc:cb:5d:10:b7:a0:cd:e6:
40:c7:9b:a2:53:fd:45:46:00:ff:a4:c9:88:af:90:b6:b3:29:
75:14:1d:36:8c:f2:fa:f4:d2:dd:49:1e:2f:22:7c:a5:82:81:
00:a5:83:7f:3d:bc:84:44:3e:27:b8:e3:8d:0c:19:5f:b0:e0:
36:b8:cb:46:7b:cc:ef:50:cf:a6:26:62:05:94:98:4d:9c:3b:
3d:9d:b2:05:67:cc:2f:9a:63:91:ab:70:6b:b6:49:67:69:b7:
82:d9:fa:df:82:61:83:f2:6b:bd:d8:01:4a:4b:0d:25:e7:58:
54:29:c0:c1:0b:c8:3b:cb:6c:f0:3f:b6:ed:7c:64:93:07:60:
6c:d0:9f:b6:84:84:b2:df:6c:04:57:91:3b:8d:e5:c0:c3:6d:
62:aa:78:6a:17:b9:3c:28:c6:e1:7f:9e:17:db:13:81:af:26:
28:2a:0c:93:25:81:10:59:dc:fa:d2:2d:21:bb:71:04:cf:d3:
54:84:17:8f:cc:e5:71:78:f5:36:2e:26:ea:25:15:ba:05:93:
4a:c4:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:53:09 2025 by rpki-client