Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: kbSxGGjh7pHF7DeMDU1O0Xj6iZndWwuZVY3lS3mwC+o=
Subject key identifier: 9F:4B:E0:C1:21:C4:2F:7A:09:C3:CA:0E:7D:41:BA:F3:C9:D0:DC:24
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019A1C50BF810B6E52F6004B0BDF999E7A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0B5D
Signing time: Sat 25 Oct 2025 17:00:45 +0000
Manifest this update: Sat 25 Oct 2025 17:00:45 +0000
Manifest next update: Sun 26 Oct 2025 17:00:45 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: nbnENo+OeGgECgQxZjUMsqeRjGyKmFuHQuP9itsokag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:bf:81:0b:6e:52:f6:00:4b:0b:df:99:9e:7a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Oct 25 17:00:45 2025 GMT
Not After : Oct 26 17:00:45 2025 GMT
Subject: CN=9f4be0c121c42f7a09c3ca0e7d41baf3c9d0dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:11:8b:d6:fd:d7:75:80:0a:9a:34:1c:a7:
7b:d1:90:49:55:58:ba:ff:bd:18:55:c7:70:95:80:
1a:36:92:4d:aa:97:73:52:22:b2:c3:50:7d:76:32:
69:5f:d6:9f:fd:c6:50:87:cb:1b:89:99:59:6c:11:
32:bf:20:fe:9c:9c:a8:1e:12:14:96:86:e9:a1:63:
bc:db:aa:3b:f6:e3:a0:a6:56:2c:09:13:fd:1e:0b:
41:25:ff:54:08:1c:a2:63:cd:7f:f6:91:2e:5c:00:
cd:9b:c0:ce:3c:77:42:74:dd:ab:75:f5:0e:0a:f3:
6c:81:5e:d4:45:ad:b3:94:fa:e5:a5:6d:ba:b6:b4:
e9:01:cc:4d:0b:b3:33:ee:97:dd:79:a4:ca:fa:a5:
d3:58:ca:04:e9:85:f4:e9:1c:01:3f:78:02:fd:8c:
3f:9d:68:8d:e3:53:43:4e:68:55:d3:40:65:23:e6:
5d:06:f3:bf:e3:9a:4a:99:3e:1a:76:40:fb:ab:a3:
57:bb:dc:42:84:39:cc:12:82:d4:d1:36:46:b8:8a:
f5:f3:91:b0:f1:03:2c:55:40:fe:83:a5:02:5b:f4:
fe:0a:4b:eb:74:f1:c2:68:f7:a2:45:97:17:5b:c7:
73:83:c6:5a:25:b2:d5:70:96:87:8e:ba:b6:68:2f:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:E0:C1:21:C4:2F:7A:09:C3:CA:0E:7D:41:BA:F3:C9:D0:DC:24
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:5e:32:39:dc:a6:2e:bf:23:b7:63:17:ef:38:c5:f6:6f:
6b:38:e3:d8:17:fb:90:4c:bd:a3:68:6d:6b:c2:21:f3:e8:6e:
ed:6e:f9:23:be:a4:99:05:14:3d:0f:b4:ee:17:8e:7a:97:69:
94:a4:d8:f9:94:1f:c7:a8:56:1c:77:4a:3a:12:ce:5d:cd:35:
e3:c9:8e:90:76:ef:04:27:44:32:1d:4d:d6:d2:86:f7:49:ba:
70:f9:3f:35:f6:a1:85:ca:ec:74:f2:ba:99:6f:28:bf:7b:3c:
04:da:ff:cf:7d:e5:8d:19:f3:fe:61:bc:4c:34:f2:4d:c9:72:
e0:38:7b:cb:e0:a0:a3:97:8e:6d:6d:5d:e8:e0:f7:28:d7:3d:
cc:67:d7:49:c7:0c:c5:c5:16:99:1d:fc:9e:ca:7c:31:9d:5d:
8a:b2:b0:bc:2b:01:c9:f0:8d:b5:83:b6:ed:f9:c3:3a:61:14:
07:d5:57:6c:3b:bc:bb:4e:03:60:89:85:77:53:f9:b4:98:b8:
fb:dd:45:5e:da:99:fe:dc:b0:f0:71:71:e2:af:99:ef:b0:e7:
c1:a8:0b:12:ae:34:92:76:a2:09:b1:ca:ae:6d:69:e9:4d:f7:
43:b0:bf:4b:8f:b7:57:49:91:f0:77:b6:32:8e:93:13:67:43:
63:77:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:49 2025 by rpki-client