Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: W38bBQOS7c4Uy3PGcG0lpaBOHUvasXHVCG4VZu4HMbE=
Subject key identifier: 49:47:EA:7D:9F:1C:0D:44:DA:2F:49:64:1A:50:DC:64:8E:09:A3:A1
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 019A247895C67809F20FB966CFDB4F691AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 1008
Signing time: Mon 27 Oct 2025 07:01:13 +0000
Manifest this update: Mon 27 Oct 2025 07:01:13 +0000
Manifest next update: Tue 28 Oct 2025 07:01:13 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: YGD8XxgFitGKM9BxX4mmNFdXOq3aEkxxlTKklJw0x10=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:95:c6:78:09:f2:0f:b9:66:cf:db:4f:69:1a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Oct 27 07:01:13 2025 GMT
Not After : Oct 28 07:01:13 2025 GMT
Subject: CN=4947ea7d9f1c0d44da2f49641a50dc648e09a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:19:7e:82:ab:fc:26:02:ef:e1:37:a6:ea:
f4:fe:d5:fe:20:a0:42:64:02:76:9b:48:ba:ee:79:
e4:eb:26:08:74:da:fe:83:d7:02:9a:3b:a3:f3:3c:
cf:71:e2:18:17:d4:7c:c9:63:0a:3c:86:db:18:22:
20:88:25:62:c6:5f:17:c1:57:46:c5:67:4c:14:28:
52:de:65:60:63:3e:1f:a8:b1:f0:04:00:9b:a2:09:
e0:d6:03:14:0d:a4:db:bf:78:c8:a1:1c:31:f3:7b:
6d:d7:34:f4:e5:5e:f9:57:f8:25:1f:9c:70:44:00:
82:4a:c2:01:f4:68:92:76:e9:f6:48:4d:ef:48:ca:
ba:96:1c:e0:2b:57:55:01:d6:a0:36:0c:77:24:9c:
7d:f6:bf:50:e4:67:81:6f:46:32:91:90:fb:bb:bf:
3c:67:50:85:c9:27:b1:e9:c1:05:46:16:25:45:e0:
cf:9e:46:f3:c9:79:dd:16:65:07:65:ae:54:4b:6a:
dd:06:d5:35:b0:cc:a2:ed:25:a6:d3:51:86:69:39:
6d:fb:ee:07:f8:0c:bf:fb:4c:20:a7:6f:81:fa:5a:
16:05:a9:c4:8f:0f:d7:1a:43:9e:dd:18:8d:96:5a:
df:ee:af:e4:e5:52:a9:0e:6f:fc:75:53:08:5b:c1:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:EA:7D:9F:1C:0D:44:DA:2F:49:64:1A:50:DC:64:8E:09:A3:A1
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:57:ce:59:49:a3:c7:d9:58:a9:43:0a:e6:39:d3:54:b5:48:
ad:a7:c6:51:47:ee:60:d5:35:88:b4:b8:c3:5b:fc:46:44:61:
31:ba:5a:b1:c8:50:21:e3:72:90:4e:78:46:31:48:1a:91:f3:
e0:f6:2c:64:86:ba:16:b5:38:73:72:b0:6b:5c:f9:c3:7f:63:
0c:c0:b3:33:d6:68:5c:ab:d5:36:8f:61:ea:11:39:15:e2:e9:
26:c0:78:71:89:2c:aa:71:20:d3:cc:e8:89:e0:4b:da:f9:f5:
35:9e:57:78:e9:8b:64:44:0a:b8:18:48:61:e4:02:84:b0:fa:
c7:3f:f4:0a:91:58:bb:9c:e4:aa:04:31:f3:fb:4e:f3:85:bd:
6e:a6:42:72:9b:02:b5:d9:b2:51:29:cc:49:c1:40:c8:3d:85:
b7:a5:a7:a4:60:77:0f:b9:ac:45:02:80:09:2a:96:78:9e:55:
21:f1:0e:28:6b:ca:c1:4b:f2:0a:68:f3:bd:3e:fe:a2:06:56:
d5:2e:be:ab:8b:2c:84:4c:cd:31:43:e3:ff:73:c8:ea:37:a3:
68:f6:51:30:b6:01:01:f3:62:9b:4a:fa:b2:6f:86:42:a2:78:
92:dd:f0:a3:6f:38:78:71:da:af:30:cb:c7:ec:43:5d:a5:fb:
90:8c:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:57 2025 by rpki-client