Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File: RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier: ENyBGrno/bi2aWDMJWhguyXs9NoYD1cHmI0JTe4vYxQ=
Subject key identifier: C3:12:45:0D:32:98:05:61:48:C3:CC:73:BF:42:2E:DC:E6:90:75:34
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial: 019A725C947AB9934E5A54ADB4F97BA3B38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number: 0ACB
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=)
2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: 6SZPyEXOPvxnk0fQx4rSK55QPNGWvcn+gwOiWoNr7r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:94:7a:b9:93:4e:5a:54:ad:b4:f9:7b:a3:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=c312450d3298056148c3cc73bf422edce6907534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:f7:5f:4c:b4:83:82:7d:e1:8e:d3:40:ae:
0e:f5:7b:a5:d7:ce:29:83:3f:a3:2a:3c:02:a9:73:
5a:1b:91:fb:f5:ab:02:2c:e7:5c:b5:dc:7b:6e:73:
89:43:4e:8c:05:67:6b:ab:b5:54:4c:c3:39:51:cd:
a9:54:15:38:fb:79:de:a9:ee:1c:ee:71:54:80:cd:
e1:ce:45:67:e7:dd:d4:70:1c:90:6c:0c:32:49:67:
89:b0:4e:e2:0e:c1:41:7e:33:d0:dd:14:7a:62:5b:
96:3e:21:be:42:23:99:9c:1d:d5:b7:6c:ba:63:5f:
b9:e0:5b:bb:32:a1:a5:14:14:aa:27:8b:03:7d:94:
a1:ad:6b:19:b2:86:45:68:f0:5f:f8:1d:8f:ce:69:
d1:a7:81:2d:dc:3f:b3:59:0f:13:5c:e6:42:25:f9:
d8:36:d2:cf:08:44:10:94:3d:60:d1:0c:ee:63:f2:
d8:fa:0b:38:18:17:80:8d:51:f5:42:9d:36:5b:84:
ff:88:6d:7d:fb:6e:67:8f:48:1b:ae:a4:c1:ee:17:
8f:47:b8:80:81:da:a3:27:4f:5f:2b:21:35:18:ec:
58:d4:81:11:28:94:c6:d1:92:ae:a7:8b:e8:38:c0:
24:61:22:cf:ab:bd:68:0f:62:e4:82:b5:12:e3:39:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:45:0D:32:98:05:61:48:C3:CC:73:BF:42:2E:DC:E6:90:75:34
X509v3 Authority Key Identifier:
keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:26:15:62:cc:e3:b3:22:37:3e:ea:b7:0c:41:dd:1c:eb:4e:
ab:57:f8:1b:2e:c1:9e:51:cb:a6:8a:74:ff:30:a2:7c:86:16:
71:ea:a2:df:ea:ef:1d:c9:c7:54:07:8a:e4:38:f8:80:56:85:
85:3d:50:5a:4a:c2:48:ab:0f:c5:fa:36:70:99:c5:df:b1:d5:
5d:dc:2b:45:59:6c:da:5d:51:66:91:32:6c:27:36:44:0b:ee:
c7:30:5f:c0:84:05:aa:7c:21:64:17:96:a9:02:eb:10:15:25:
f2:91:da:47:f3:d5:dd:f9:c0:80:c5:18:34:7b:fe:88:44:23:
8c:be:c0:bf:df:f3:07:ba:6f:30:f9:91:4b:42:91:00:a6:f5:
f6:ee:c7:88:d6:21:1a:13:55:80:e0:6e:76:52:1b:60:a5:34:
56:27:b2:56:e9:b7:61:bf:1d:7a:aa:20:8e:fd:0a:f9:dd:13:
b9:97:7a:91:e6:16:1d:29:fe:bb:50:8b:3d:0e:2a:09:d9:2e:
cf:4e:1c:79:a3:9e:a9:48:cd:a4:ab:bb:16:59:2f:37:a4:1a:
46:57:bf:a9:17:63:78:70:af:0a:ed:64:45:1f:89:b3:6f:4a:
09:98:14:82:24:95:40:3d:ed:3a:2c:c9:73:68:dc:5a:be:ba:
f0:0a:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:55 2025 by rpki-client