Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier: 8uqZyHcuQlKct70s1FeUFUYhHZ5F4UpTs4QBs4sldgw=
Subject key identifier: 6C:0C:D6:2F:C4:66:3E:C5:C0:EB:D1:4C:0F:BF:ED:9B:5C:40:18:D8
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial: 019A09A547E20909471A0C4085D1EF1F52F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number: 018B
Signing time: Wed 22 Oct 2025 02:00:18 +0000
Manifest this update: Wed 22 Oct 2025 02:00:18 +0000
Manifest next update: Thu 23 Oct 2025 02:00:18 +0000
Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: 45rUJHEg9v1yoG9eZbHPpl6F/H6dA+5z2ii7MgvjUVo=)
2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=)
3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=)
4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:47:e2:09:09:47:1a:0c:40:85:d1:ef:1f:52:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
Validity
Not Before: Oct 22 02:00:18 2025 GMT
Not After : Oct 23 02:00:18 2025 GMT
Subject: CN=6c0cd62fc4663ec5c0ebd14c0fbfed9b5c4018d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:b4:2b:a4:4a:fd:5d:d1:82:6b:de:f2:82:
f8:b1:af:1b:4e:72:b9:81:75:9a:f0:f3:b4:0e:37:
d8:51:aa:45:9b:9f:67:8e:cc:eb:74:11:33:99:4d:
27:34:d9:e2:28:21:d7:84:2b:d0:92:71:b1:39:25:
39:65:58:07:4e:81:7c:0e:bb:82:5a:e8:36:e0:4c:
a8:7e:28:96:8e:a7:c4:d6:1b:98:45:7d:18:50:29:
02:ba:3e:00:a6:c6:6a:ec:c3:8c:4a:2c:bd:be:4b:
e9:3d:32:7a:5c:ad:3c:45:18:6d:da:35:57:e0:05:
de:77:07:ae:4e:1e:ae:89:40:7e:ce:72:6b:ec:8f:
27:ff:71:ee:9d:b3:0a:70:54:a2:b2:be:87:24:09:
df:b0:b1:4e:0b:97:6c:e7:be:43:de:f4:61:fa:e1:
77:24:b0:3f:80:08:0b:2c:bd:a7:aa:6c:c9:c9:9a:
a6:0a:8d:9c:d5:be:63:c4:65:ea:94:b5:fe:dc:da:
d6:b2:2c:db:ce:c0:bd:3b:c8:5d:3a:3b:d9:b9:94:
6a:36:48:2f:5d:bd:1e:83:e3:cf:b8:72:68:eb:8f:
3d:09:41:ce:5e:da:23:df:d3:41:1e:c7:79:ff:67:
c9:06:ba:b2:f1:85:ff:55:8c:04:1d:9a:ff:e8:b1:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0C:D6:2F:C4:66:3E:C5:C0:EB:D1:4C:0F:BF:ED:9B:5C:40:18:D8
X509v3 Authority Key Identifier:
keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7d:82:cf:a4:c6:b3:fa:d8:30:53:13:ec:67:e9:23:46:a1:
37:69:02:63:74:dd:85:3a:92:20:42:5d:a0:a1:8d:48:74:f5:
e3:31:ed:2f:3d:39:7a:02:5d:e8:8c:8a:9f:48:be:fe:b6:27:
bb:95:0e:25:48:8a:02:75:73:25:79:87:f4:14:5f:a7:33:ce:
1e:59:70:c5:88:6a:1c:f1:1f:a2:77:1f:3c:20:4f:ae:1e:47:
b0:82:c8:8c:b2:81:61:f3:66:bc:10:21:0f:22:0f:f0:45:75:
63:87:6b:06:53:bb:4e:c6:86:58:4d:ff:16:12:6c:49:04:7c:
b0:e1:ab:a0:cf:ce:6e:26:31:5c:dc:93:d2:8a:6d:9d:6b:de:
76:ae:1b:61:33:9d:a5:2d:28:10:fe:54:77:20:89:0e:82:70:
5d:54:94:e0:a8:8a:3a:67:13:a2:43:ed:32:8d:a6:03:a8:35:
8f:17:29:58:87:bf:95:f1:48:0f:ea:5a:8a:e1:a2:81:a7:fe:
9a:aa:91:08:37:a7:df:6b:46:c6:e1:17:bb:d4:62:d5:b0:f0:
a1:c7:fa:8c:2c:8d:6d:18:4b:01:a0:58:3d:b6:47:e6:c1:b4:
e2:3a:7c:28:32:37:5a:2e:b7:0c:9c:69:e1:67:7d:75:29:e8:
70:f8:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 06:51:56 2025 by rpki-client