Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier: ZDk6iQKy7XgV7azHrj3wjBVzWMRNdtk3kBl1QQCAWP0=
Subject key identifier: 33:2B:0A:13:23:01:58:25:46:BE:32:5F:AC:07:63:46:68:D7:CD:7A
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial: 019A70DC66BAA2FD0795BD78EA052B1E96A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number: 11A2
Signing time: Tue 11 Nov 2025 03:01:23 +0000
Manifest this update: Tue 11 Nov 2025 03:01:23 +0000
Manifest next update: Wed 12 Nov 2025 03:01:23 +0000
Files and hashes: 1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: g9VA0wo0dsRnAZueJLXzoipuw215iwDbpIOGmdRaTco=)
2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:66:ba:a2:fd:07:95:bd:78:ea:05:2b:1e:96:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Validity
Not Before: Nov 11 03:01:23 2025 GMT
Not After : Nov 12 03:01:23 2025 GMT
Subject: CN=332b0a132301582546be325fac07634668d7cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:b7:fb:fc:af:8e:72:44:e5:f1:f9:d0:15:
9c:ad:a5:fa:05:23:95:e4:14:52:48:44:72:a3:96:
78:0d:0c:58:86:12:83:c4:65:e5:3a:8b:63:64:57:
ee:b7:55:8c:d6:5c:5a:5c:86:92:11:b6:73:6e:8f:
56:de:4b:bf:33:fb:af:45:7b:52:aa:44:ea:df:e2:
9f:7d:68:84:40:a5:e0:f6:b4:53:4b:98:05:25:0f:
2c:c2:4f:3e:72:4a:79:2d:6b:c8:0d:e7:b2:1a:cf:
95:ba:65:f2:15:5e:66:91:82:7e:c2:26:df:52:24:
55:1e:6d:e8:90:77:cd:54:23:50:95:db:59:8f:85:
a3:97:66:ab:7c:7e:d5:20:c4:fc:f2:fa:ff:86:3d:
1e:aa:28:e4:6d:2e:ac:45:5a:d8:56:a3:e0:52:09:
a4:8b:9d:da:b9:27:42:b8:8b:fb:e1:73:3d:40:fd:
5d:df:d1:06:54:e4:d1:44:7b:cb:09:ff:c0:a2:1e:
56:bd:62:27:01:41:e1:71:96:f1:c5:c6:40:d2:85:
67:e5:80:d6:cd:4a:58:ab:ac:aa:02:8e:9d:13:3f:
86:18:9a:a1:48:e5:2f:71:6b:c4:5f:25:01:2e:01:
36:c5:90:38:57:44:36:f6:9c:13:3c:0a:9d:8b:c7:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:0A:13:23:01:58:25:46:BE:32:5F:AC:07:63:46:68:D7:CD:7A
X509v3 Authority Key Identifier:
keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:d7:24:17:08:21:1d:9e:8b:86:10:a3:d4:a3:08:6d:5e:
3c:4d:23:c6:05:07:ca:29:53:8a:19:f9:03:95:f6:b8:a7:2b:
b7:10:44:c2:89:27:3c:a3:38:fe:f3:b9:5b:ab:4a:1b:87:fc:
cb:7b:d1:f6:4c:4a:a2:a8:35:06:02:8b:29:3f:46:95:8d:92:
d7:45:3a:a5:0e:cc:74:7d:49:8e:49:14:a1:56:52:31:f8:03:
d5:27:d9:0b:68:ae:72:0f:2e:8d:b8:37:e2:c7:2c:25:81:21:
46:63:df:0e:c5:ad:de:4e:1f:49:49:8a:c8:5c:f0:a4:86:58:
0f:64:e9:ae:37:c5:62:15:55:de:98:4e:ac:ad:9d:93:78:84:
5a:6e:03:b5:09:5c:96:ce:ee:3f:59:ec:55:57:6b:6a:24:da:
10:1f:32:98:09:20:96:ed:9b:8f:95:26:27:6e:d6:6e:73:51:
9c:42:14:17:e9:33:15:2c:bd:30:ab:7b:c7:6e:a4:aa:00:28:
38:d5:8b:ab:ef:2a:19:ae:8b:9e:2d:a5:09:56:6b:d9:fc:fb:
4e:c0:be:e8:e8:f2:4d:4d:5d:37:3a:e2:1c:31:1c:7f:2f:48:
37:c6:90:7d:0e:64:43:f5:0b:25:9c:c4:87:ca:31:19:1a:8b:
ef:3e:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:32 2025 by rpki-client