Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier: XdhEMsohV8OfimNKdwuJSnL1qu/ydILoY4JcyC/7Ejg=
Subject key identifier: 20:11:A6:E5:70:99:3C:06:E2:5D:22:D5:A4:EE:34:6C:1E:2C:FE:7E
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 019A2AE7A10BA8178282AA4198E2AE91B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number: 0B8A
Signing time: Tue 28 Oct 2025 13:00:14 +0000
Manifest this update: Tue 28 Oct 2025 13:00:14 +0000
Manifest next update: Wed 29 Oct 2025 13:00:14 +0000
Files and hashes: 1: 3N9UYLo0xUDRDj5u2ZGsggXWyM8.roa (hash: GzegVU/Yobk+zlKS0VWYX3GqVecmGnXDmHTuncP48uU=)
2: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: AdDhB101VdFaJMzdqo7Z2K72pSC9pcki5U6GQwltJJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:a1:0b:a8:17:82:82:aa:41:98:e2:ae:91:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Oct 28 13:00:14 2025 GMT
Not After : Oct 29 13:00:14 2025 GMT
Subject: CN=2011a6e570993c06e25d22d5a4ee346c1e2cfe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:d3:0a:01:86:f3:56:f5:5b:23:4e:03:44:
a6:e6:32:0c:73:11:f0:a2:d6:d2:5c:82:65:20:ea:
0c:d8:f0:ad:ee:a9:a8:e4:6d:81:bf:7e:55:ff:24:
38:83:a5:d1:42:25:45:cd:ee:05:7c:2a:12:cd:a9:
87:58:bd:e4:8a:d3:bd:24:20:5e:33:49:12:93:92:
b4:d2:6a:9f:ba:f6:ea:45:89:51:26:01:47:31:f7:
59:5b:64:29:ba:57:6b:39:d1:db:ff:f6:df:c6:ea:
73:4a:5c:b2:24:2e:07:c5:35:b2:ae:66:0e:74:ce:
43:e3:c0:17:3b:a0:cd:59:53:fd:03:74:c5:68:85:
6c:b9:3a:32:39:2d:89:71:3c:70:b4:be:aa:39:1c:
2f:5b:ae:68:ab:13:dc:63:82:06:8a:ad:fc:35:1f:
95:9d:9a:e3:ac:98:80:cb:57:d7:88:83:b3:a3:79:
59:25:54:60:27:1d:bf:06:37:e2:29:17:97:31:0e:
d4:aa:44:7d:aa:de:23:52:00:8e:a3:87:1e:72:ed:
1b:e0:0f:e5:35:eb:f6:81:a9:81:80:22:01:ae:59:
a4:57:42:20:52:8d:d4:14:ca:d8:bc:9d:4e:24:7f:
ff:83:14:c7:d0:14:98:5b:f6:90:a4:05:c4:e4:b9:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:A6:E5:70:99:3C:06:E2:5D:22:D5:A4:EE:34:6C:1E:2C:FE:7E
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:46:a2:54:3a:cc:36:0e:8d:10:57:8d:a2:71:38:5f:26:
fc:48:b7:24:61:21:3d:8a:00:15:cf:ff:17:e9:08:38:54:c5:
b2:0f:e7:9b:f7:e8:92:f7:98:a7:94:ed:da:55:8c:b7:84:53:
a7:97:78:a1:6b:38:a4:fa:4e:ea:a1:63:a8:f3:40:d3:d8:4d:
3c:f9:fd:dc:ca:52:7c:2d:e3:20:44:4d:d7:7e:df:0b:c8:b3:
f9:60:cf:a2:bc:6b:bc:10:84:49:3d:f6:0e:02:c0:8b:68:4e:
ce:5d:8e:a2:49:87:48:d5:0a:0b:ca:11:8a:41:91:03:4c:c1:
c4:97:3e:0f:8d:f2:3a:a6:7a:cf:4e:1a:4f:85:2f:1c:53:2b:
06:3d:13:e6:2e:5e:18:92:89:8d:ca:83:a2:d1:e0:bc:47:38:
b6:5d:83:ae:8b:bc:de:94:cc:89:65:77:03:07:58:d6:07:da:
6b:4c:06:55:bc:20:ca:cb:ad:f5:e0:42:2c:c1:61:82:ab:cc:
bd:b9:c9:18:9a:ad:25:38:1a:7b:0a:5c:26:66:f7:84:77:60:
fb:d6:36:d5:37:13:47:0f:2c:ec:2d:87:5d:17:54:f9:e9:2f:
47:65:5d:9c:45:e2:27:dc:c0:be:32:6c:5f:24:67:ec:6b:ff:
0b:b9:91:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:34:33 2025 by rpki-client