Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: ZH88lroOZOsejWy1FWGoUc+6IARjCy2sjYOXxeKEplw=
Subject key identifier: CE:FA:E5:FC:00:BC:06:33:7E:07:B1:FD:D7:92:2C:F6:00:15:AF:33
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 019A72266021D418844D7527E681DA8F5CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: 40ABMKSWMcb+/Sw6JGUwDgoQw/wWrPUAhPfG2Hr7uZw=)
2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:60:21:d4:18:84:4d:75:27:e6:81:da:8f:5c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=cefae5fc00bc06337e07b1fdd7922cf60015af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:d8:50:ba:1b:3e:32:b5:dd:18:ce:5a:02:
03:eb:db:74:be:d7:e9:7a:15:a7:92:3d:f5:2d:e7:
87:05:91:49:ae:a3:85:58:e9:ed:44:3d:35:2e:00:
4d:1c:e0:8f:98:f2:9a:79:e6:29:a7:5c:fa:71:31:
c5:c1:61:3a:9e:96:66:21:f6:50:d3:cd:cb:3b:89:
bc:bf:b0:2e:b5:2c:51:7e:9e:cb:8f:29:1b:75:6d:
5c:4c:1a:34:87:46:fa:6a:25:ad:d1:4f:b3:da:a7:
cc:ce:86:65:81:37:90:4c:f1:c6:6b:c6:c2:98:93:
85:a9:10:24:a4:26:57:f3:d8:8b:cc:92:5b:c3:2a:
09:12:dd:70:94:fa:a8:53:f5:d3:72:eb:45:4e:66:
b6:4b:03:0a:c8:67:d0:79:28:f4:da:6c:8c:f3:9b:
90:a1:fb:95:da:6c:62:ab:af:18:36:6a:f7:f6:77:
ee:fb:69:44:09:e4:ce:ed:53:1c:1f:c6:af:2e:b3:
d8:81:35:8d:7c:7a:7d:1b:dc:9b:c6:77:c0:5c:2b:
bf:53:eb:30:79:ba:cc:f2:1b:02:f6:a0:d9:fb:a9:
c8:06:ee:56:50:9b:a9:07:61:af:bb:e9:50:72:2f:
31:bf:52:e9:2a:ce:a5:90:09:ba:80:c3:6d:5c:c8:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:E5:FC:00:BC:06:33:7E:07:B1:FD:D7:92:2C:F6:00:15:AF:33
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:5e:21:10:ea:42:96:d8:33:28:c9:20:9b:80:d3:12:57:bf:
f6:2b:83:a2:46:a5:14:33:8c:b4:fa:71:f4:89:1c:c8:dd:c6:
ba:1b:76:73:9e:2e:e0:5a:bc:ab:3c:6e:c5:2e:79:b4:ed:01:
4f:32:b3:55:20:d8:65:2a:5d:f5:f0:ba:8f:b0:ea:43:45:40:
69:b5:9b:81:78:b6:bd:40:e4:20:c5:a0:90:15:6a:63:10:e1:
7b:5e:82:b8:87:da:83:ba:18:b2:b6:27:29:b6:10:a8:6b:17:
f5:af:ab:ec:2a:14:39:86:9a:d4:64:7a:b8:f0:cf:78:e2:8a:
21:59:28:42:a8:d4:41:91:e6:8b:4f:5c:49:49:93:e8:57:c5:
07:e3:f4:4a:4b:11:45:68:84:eb:ab:9b:2e:f5:96:31:ca:ca:
14:d1:13:35:c2:87:8a:7e:b2:73:73:95:8f:84:e7:dd:90:21:
4d:8a:b7:50:42:c4:0d:74:78:8e:82:3e:9c:cd:ba:f3:a8:f5:
23:8c:ac:57:74:ed:5f:a9:12:55:4f:4a:8c:a3:e7:41:0a:c3:
3e:c1:00:85:a2:5b:f3:8e:b8:64:3d:1e:62:f7:ba:2c:72:72:
7a:63:44:f3:6d:16:6e:c2:0a:30:25:29:79:24:7b:d7:ed:02:
3a:04:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:16 2025 by rpki-client