Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: E4E2j3afdedkP/OVm5VgT8UOHDSUz9vhljGktJVidX0=
Subject key identifier: F2:B4:8C:31:CD:6D:7A:08:08:B8:74:5E:18:FE:CA:87:F4:5E:C6:FA
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 019A293073290CED7A72B177BA229FD9F762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: 022C
Signing time: Tue 28 Oct 2025 05:00:32 +0000
Manifest this update: Tue 28 Oct 2025 05:00:32 +0000
Manifest next update: Wed 29 Oct 2025 05:00:32 +0000
Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: N2T3U+hqAMF58CWv72mQOkfZL2dTiNd6ssfCJVsSPY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:73:29:0c:ed:7a:72:b1:77:ba:22:9f:d9:f7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Oct 28 05:00:32 2025 GMT
Not After : Oct 29 05:00:32 2025 GMT
Subject: CN=f2b48c31cd6d7a0808b8745e18feca87f45ec6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:98:0d:d5:ef:c2:c5:95:16:9d:80:12:c2:
97:fe:bd:eb:63:15:56:b7:46:ec:c6:7b:8a:07:87:
46:ef:37:81:70:e7:cf:08:d8:85:ed:17:08:e6:58:
3e:10:d6:91:28:a8:28:d3:81:ac:49:49:4b:c1:3d:
fe:dd:4f:7b:b5:a7:2d:d5:ea:a2:68:a2:e4:0e:c0:
11:d6:c8:57:e1:76:c5:8b:40:e2:27:4f:23:40:d6:
41:98:a0:25:d5:64:bb:0b:41:e6:09:03:cf:70:14:
1f:ae:ce:32:39:07:99:cc:db:a5:0e:1b:5d:53:13:
8c:51:2e:c6:22:16:74:62:e0:cc:99:e7:4c:c7:f3:
2a:c4:0f:3a:3f:64:02:96:a0:a4:1e:bb:de:99:4a:
8c:0a:3e:75:b7:b5:ce:92:e2:07:52:3b:c9:c8:d2:
ba:e9:44:0a:11:f2:77:d9:64:bd:66:6d:73:db:9d:
71:80:4c:a5:01:0a:bd:b8:7a:cd:13:2d:3c:ea:2d:
c5:af:29:b6:5d:47:d8:3a:33:1d:5b:12:bb:7b:a4:
97:18:8a:c0:bd:9f:46:96:31:fa:3c:ea:4c:cb:9b:
5c:82:d3:93:d9:ad:0b:04:c6:0d:ac:bc:c7:e7:e3:
88:58:c2:e4:b7:8f:df:50:8a:26:08:cb:3c:df:81:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:8C:31:CD:6D:7A:08:08:B8:74:5E:18:FE:CA:87:F4:5E:C6:FA
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b7:fd:2a:85:72:24:e9:ad:97:3d:07:36:a5:4b:ab:87:e5:
11:d2:4d:a5:a5:e4:e1:c7:dc:c8:98:61:bb:b4:18:84:9d:7f:
d3:31:ce:7e:28:f3:f7:e9:29:b6:a9:d5:bb:09:14:b9:85:95:
03:28:6e:42:99:d9:9f:cd:2b:80:85:e2:b3:0b:05:23:5a:fa:
79:06:dd:b0:04:f3:ab:55:21:6f:6e:76:61:de:55:3c:67:a2:
4d:7d:b2:4a:93:63:ad:04:a2:eb:19:ca:9b:9e:dd:08:52:47:
4e:4f:da:33:4b:3b:18:03:17:b9:b4:5d:e1:e2:8d:38:e5:01:
81:42:8d:ef:a4:99:f7:72:fc:78:07:fe:d6:dd:e6:db:46:82:
16:02:6c:98:d8:e2:e6:83:cc:74:52:f1:21:65:25:5e:8f:72:
a1:af:99:f8:80:25:97:da:07:91:b5:4d:e3:9d:ad:3e:00:cf:
b8:02:45:19:94:9b:1f:fa:0a:ac:55:ca:4a:93:f8:3b:2f:8d:
f0:1b:4c:56:33:96:81:f0:ce:60:26:d1:f3:c6:14:ee:05:3c:
62:29:a8:f7:ae:35:0f:4f:83:26:e2:c0:f8:38:61:44:b7:82:
b5:ce:cc:b9:cf:e8:32:bd:dc:fc:05:88:68:c0:63:90:fa:0d:
8d:fc:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:08:04 2025 by rpki-client