Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: tCRtFw90jRWHoUDvpzqd+X2FteZkxQcqGHm1371Dxp0=
Subject key identifier: D8:5F:DB:4C:6C:73:13:0A:F8:3D:44:BE:1C:8F:F9:17:BD:08:AC:B0
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019A1EE3B3FD19AE8EC4AE56DD5D5D14971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 05:00:30 +0000
Manifest this update: Sun 26 Oct 2025 05:00:30 +0000
Manifest next update: Mon 27 Oct 2025 05:00:30 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: g9HKPuwur08J/pCarMDbfCXnqV4lUPpqtKnj1uKCLkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:b3:fd:19:ae:8e:c4:ae:56:dd:5d:5d:14:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Oct 26 05:00:30 2025 GMT
Not After : Oct 27 05:00:30 2025 GMT
Subject: CN=d85fdb4c6c73130af83d44be1c8ff917bd08acb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:29:82:06:45:5c:ba:89:31:4d:87:7f:06:1f:
1e:77:18:74:76:fa:84:30:94:2b:cf:c2:1c:fc:fb:
39:85:5c:7d:b6:4d:2b:a0:65:1a:6a:0d:77:61:35:
64:28:56:f3:44:81:cc:5c:55:4a:13:b2:69:3c:7d:
87:f0:3e:5b:a4:4d:4c:5b:ce:5c:b2:d0:5a:ca:5a:
66:d3:11:4a:68:62:34:a5:56:91:45:d0:f0:bf:2e:
9a:7d:63:10:ee:07:71:82:d9:df:cd:c9:13:92:ff:
00:d0:05:cb:98:79:b2:ee:87:a0:c1:24:c8:dd:03:
2a:59:c8:1c:90:ea:eb:33:b9:98:cd:81:28:89:dd:
47:dc:6c:de:e8:0c:55:c0:cf:fd:a2:54:ea:51:e7:
06:91:ec:bb:30:1e:dc:fa:32:56:eb:0e:33:1f:84:
cd:cb:32:b8:9a:e0:9c:e1:f3:0c:3a:77:86:b2:7b:
fb:1b:4f:81:85:ab:f8:18:7b:94:33:c3:4c:17:a7:
f9:fe:f5:2b:f1:b4:8b:b3:1e:ec:eb:32:00:a1:57:
48:fd:86:e3:e7:af:95:4a:fd:49:68:08:0b:e6:2f:
a5:fd:5e:b1:e9:77:3e:1e:61:86:33:7d:5c:a8:7a:
76:a0:4d:f9:d5:37:d6:7a:59:5a:a2:f2:c3:eb:fd:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:DB:4C:6C:73:13:0A:F8:3D:44:BE:1C:8F:F9:17:BD:08:AC:B0
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:ad:31:51:ad:6c:c3:89:7a:62:43:e0:e8:6c:38:5a:5e:
57:d6:b8:36:79:e7:c3:56:d4:16:2b:ff:68:a5:18:7b:20:a1:
57:96:fc:f2:c0:a7:d3:3c:64:e9:f0:ba:b4:1c:1f:82:b6:c0:
59:69:fb:b7:66:a9:69:9c:4b:5a:71:b9:73:75:2e:8b:da:16:
d9:59:02:90:45:3e:3c:b5:6b:2a:e1:dc:c3:d9:60:55:32:64:
35:90:99:2a:ea:55:ca:51:03:ff:27:d7:65:ac:95:2c:f7:46:
4a:21:fd:c8:96:56:c1:62:0e:81:e5:64:84:93:92:18:2f:c1:
81:95:d4:f1:01:2f:a0:48:83:88:0d:35:b7:1b:c1:e5:11:a7:
e1:df:36:1f:9c:87:9f:53:bd:26:d0:1b:26:a0:7f:ee:9a:14:
fb:17:e4:2d:62:dd:2d:28:3a:d1:02:a5:a8:11:7d:2d:70:e9:
be:3e:f9:b0:dc:b0:0e:e9:9f:00:d4:0d:25:8a:ba:35:0a:fb:
2d:d2:5d:25:18:69:1e:d3:2d:e7:dc:17:ab:92:71:19:0b:0a:
bd:4e:4a:87:cd:c0:17:9b:e8:e6:0f:62:a3:ce:ec:28:89:3d:
ca:a6:1f:07:97:d4:de:99:be:f8:2e:0f:29:6c:2a:2e:cf:6c:
30:4f:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:21:42 2025 by rpki-client