Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: dWGFyAFQ2ypciUyVpjLdM/pBB4wDA4S0J+JyWU+SEMk=
Subject key identifier: D1:6B:3F:FF:D9:C8:D5:24:C1:24:37:DB:42:71:53:C1:0D:D9:F2:6D
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 019A1AD1393E1369038AA9BA29DDB111CD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 071C
Signing time: Sat 25 Oct 2025 10:01:50 +0000
Manifest this update: Sat 25 Oct 2025 10:01:50 +0000
Manifest next update: Sun 26 Oct 2025 10:01:50 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: FxgefhLN5LQil/SxMeFSk3mykAJRebdsdDS3cwJN1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:39:3e:13:69:03:8a:a9:ba:29:dd:b1:11:cd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Oct 25 10:01:50 2025 GMT
Not After : Oct 26 10:01:50 2025 GMT
Subject: CN=d16b3fffd9c8d524c12437db427153c10dd9f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:b2:86:6b:79:95:c8:a2:9c:58:93:09:43:
8b:4f:1c:cf:60:18:b8:12:f3:85:ed:5f:c1:d4:7e:
04:67:41:df:45:dc:f5:7c:f8:8b:3e:f5:2f:4b:cf:
fa:df:d8:5d:8c:3b:e5:b0:15:b1:5e:f9:6b:6c:8e:
11:29:f1:74:09:2c:3c:22:20:f0:87:a6:d8:09:d7:
b1:81:7a:98:aa:28:29:67:de:26:70:53:cd:d2:91:
48:8c:ac:2f:2c:0e:26:7f:18:00:ec:bd:50:d6:06:
1a:7e:3e:df:04:74:73:e0:c4:22:69:42:99:bb:6b:
72:16:33:8f:a0:99:74:cb:43:a5:c1:bc:be:15:c3:
52:b2:a8:1f:95:8e:e4:08:23:86:21:9f:22:76:7c:
7c:21:7d:64:35:b1:db:ff:bf:77:0b:af:52:b1:09:
79:2e:2f:90:09:79:e7:c6:a9:43:69:69:30:a2:f9:
5c:f4:c0:59:88:f6:a8:16:c0:a9:ec:8d:3c:b9:65:
52:26:ff:1e:3a:ed:08:11:a0:25:71:7d:0f:81:4e:
ea:eb:8f:31:69:fb:97:0d:2f:9b:06:4f:9f:e3:f6:
b8:66:34:22:04:99:4f:09:27:4d:df:62:da:89:cd:
2e:de:c0:d7:3e:65:31:86:14:e3:a7:9c:cf:1e:cc:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:3F:FF:D9:C8:D5:24:C1:24:37:DB:42:71:53:C1:0D:D9:F2:6D
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ca:0a:82:07:be:dc:55:e2:98:26:81:7e:58:df:5f:74:38:
60:8e:e6:6e:a3:a0:83:00:f3:a3:9d:d1:69:3c:1e:c1:e4:17:
f2:f1:68:6a:d1:0c:83:c2:4c:f4:13:34:25:09:d7:24:9c:48:
5e:e7:c6:a5:3e:3e:90:8a:d3:d7:c7:6f:d5:de:75:e9:16:42:
f0:5d:e3:12:e7:8b:1d:a7:eb:57:13:77:ce:45:df:a6:79:f6:
be:ef:4a:55:9a:5c:59:83:53:83:8d:82:d5:bb:34:19:bc:1d:
a0:3d:6a:e8:99:90:8e:a6:2c:58:aa:38:36:48:f5:61:b3:89:
23:95:f7:fd:2c:df:21:3b:8d:4e:a8:dd:e8:26:ac:60:a9:8f:
88:ff:5d:a5:d9:ac:4f:b3:c3:24:94:ad:b8:a2:4d:09:6f:3d:
2c:b2:f5:42:b6:32:01:cf:1b:59:d4:f3:8b:82:9b:01:2e:3e:
f0:7b:a1:79:75:44:a8:ec:7d:ff:49:31:9d:e1:e8:7e:b3:52:
57:2a:8b:f7:90:0f:e2:6f:6f:f7:b4:f5:4a:36:cb:3b:02:96:
36:3b:7a:38:4c:ad:9f:4a:a8:c9:c8:17:c5:e4:d8:9c:8a:c5:
ef:c0:90:35:a2:f7:63:7c:74:da:35:3b:19:e2:31:6e:1c:41:
f5:5a:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:00:17 2025 by rpki-client