Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: 8aBmaMuXoEGZEdfI4lUlBNhhrYAU5MktzQ+excXw54g=
Subject key identifier: FC:DB:EF:13:C4:78:54:E1:1C:08:E2:8C:81:D5:BB:26:BD:C5:1E:9C
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019A047EB4295492D0A9DFC703262F82FA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 020A
Signing time: Tue 21 Oct 2025 02:00:03 +0000
Manifest this update: Tue 21 Oct 2025 02:00:03 +0000
Manifest next update: Wed 22 Oct 2025 02:00:03 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: cIMt8sBi5rSh0hSbUIjkVW2TZMeNhkmJj48ipnLcYYk=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7e:b4:29:54:92:d0:a9:df:c7:03:26:2f:82:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Oct 21 02:00:03 2025 GMT
Not After : Oct 22 02:00:03 2025 GMT
Subject: CN=fcdbef13c47854e11c08e28c81d5bb26bdc51e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:37:74:c9:26:5c:c7:31:f4:f9:49:e8:de:
6f:14:a9:d6:f2:ba:f1:f8:81:6c:b6:37:f7:89:99:
c9:05:7a:23:74:f2:9a:99:f5:84:c8:50:ad:64:d4:
1c:f1:da:72:e9:74:9d:d3:e0:9b:f3:d6:ae:e7:4a:
34:3e:20:5d:33:e1:66:3c:7a:17:c1:c1:9b:24:12:
be:25:c1:33:f2:3e:6d:c2:38:53:43:de:bf:4a:15:
c3:53:b4:4b:93:d0:fa:88:ca:3b:24:b7:e4:a4:56:
0b:5b:9f:d0:24:14:f4:5a:31:a8:ff:19:3c:7e:9e:
88:c0:22:c3:e4:7d:7f:f0:7c:8e:f6:48:19:85:6e:
b4:30:ec:0f:ae:57:15:6b:a6:8c:6b:a4:19:d7:1a:
a2:05:09:8a:06:9a:17:7a:13:d0:e9:5f:a6:5b:3b:
09:da:13:a7:19:cd:a9:b8:39:41:cd:f6:a2:94:a3:
67:c0:d8:27:8f:f4:33:34:c9:84:a6:b6:01:19:44:
41:5a:70:b9:22:c9:44:4d:b2:0a:fb:3c:db:fe:29:
8a:77:af:11:c2:21:6e:88:65:17:d1:34:0f:09:19:
70:4d:72:9c:8f:4e:c5:07:3e:5b:30:bf:73:0d:3e:
eb:fe:ac:92:52:55:a9:5b:fa:3e:84:9e:88:32:cd:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:EF:13:C4:78:54:E1:1C:08:E2:8C:81:D5:BB:26:BD:C5:1E:9C
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:8c:82:f9:4e:c8:6a:99:9d:11:69:a8:5b:29:ed:4d:7f:
aa:b7:32:89:cf:e7:0f:e7:81:82:3a:4f:3f:91:f1:0b:05:c1:
91:07:ee:bc:4c:05:70:d4:b4:6c:2e:8f:02:21:23:ef:b4:cb:
03:cb:a2:fd:a6:53:be:09:a2:9c:71:f1:24:c8:96:dd:01:63:
7d:ed:eb:a9:96:7d:f4:d3:4a:b0:db:37:ca:37:0a:fe:bd:07:
59:aa:d0:b6:f9:6e:72:d8:da:cc:e6:e5:10:9a:6d:4d:6c:00:
9d:fb:ed:2c:26:3b:57:1f:12:d1:a0:c8:8f:e1:e1:76:e6:c4:
33:6e:66:95:4e:05:d9:79:05:8f:ff:17:5a:48:83:59:25:a2:
10:96:eb:c3:0d:a4:d4:be:3c:30:a8:ad:4b:ac:51:ec:35:73:
48:69:67:53:9c:92:52:51:17:b7:46:41:e3:a2:0c:03:20:4c:
df:94:00:74:0f:0a:23:6a:4a:ad:fc:22:e2:bc:12:09:50:92:
8d:48:4b:a8:5e:a9:8f:22:1c:6a:43:6e:2b:8f:7a:8e:0a:0c:
03:c7:56:7c:11:19:8f:0a:11:d5:f4:ad:dd:c5:4d:7e:93:ef:
ea:10:2f:9c:58:96:81:43:9c:03:01:5f:91:35:b4:21:af:2f:
81:2c:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:52:53 2025 by rpki-client