Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier: 0F3AH0gjWzgeKpb7DEVbsMwQSWj4yIuHDCs72A205Jg=
Subject key identifier: 34:14:F4:F6:37:14:8E:4F:BD:1A:BE:27:2E:ED:BD:FF:FC:9A:CC:EA
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 019A15A9ABDCEE92B1F8AB9154A55B3A2B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number: 0DD6
Signing time: Fri 24 Oct 2025 10:00:32 +0000
Manifest this update: Fri 24 Oct 2025 10:00:32 +0000
Manifest next update: Sat 25 Oct 2025 10:00:32 +0000
Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: Iod0PlLgBbRfbWe6dJW4Ds8Av0His7kSF3RJJGKDdZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:ab:dc:ee:92:b1:f8:ab:91:54:a5:5b:3a:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Oct 24 10:00:32 2025 GMT
Not After : Oct 25 10:00:32 2025 GMT
Subject: CN=3414f4f637148e4fbd1abe272eedbdfffc9accea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:23:ac:7d:0b:51:ef:c9:cf:c2:99:63:1b:
57:4d:6a:1b:8d:6f:95:60:6f:b4:74:07:e0:f6:ee:
8e:63:82:dd:75:c5:28:38:fe:45:3e:4c:5b:18:1f:
75:f5:b7:4d:78:b2:9d:be:32:f3:91:b9:b9:67:61:
01:ec:6f:de:40:35:4a:48:f6:e3:ba:78:2c:e4:56:
b8:bd:6b:a3:b4:1f:4b:f9:26:ee:77:b1:4e:2c:81:
54:31:ce:57:5f:d1:e1:2a:af:1c:df:9d:49:04:27:
ee:98:43:99:a1:8a:29:15:79:b6:92:3c:1c:72:40:
3b:a4:13:c6:f7:27:1b:71:0a:58:de:ea:1a:c9:4a:
dd:d8:93:7c:05:5a:63:39:73:c6:27:dd:a9:30:b4:
74:f8:39:85:fd:4b:b8:7d:4f:f7:73:06:a0:65:9b:
35:64:e8:b6:d3:e8:72:f1:05:16:51:4b:2d:8a:41:
a3:2c:a2:16:56:87:7d:14:5b:c2:e1:fe:7c:bb:ef:
6e:79:aa:9b:a3:91:7c:31:65:72:14:b6:74:f2:4b:
88:60:39:26:71:87:25:76:3a:fd:f2:ad:7f:6e:e2:
f9:47:3b:8b:de:d1:2e:10:8a:73:59:b7:fe:2c:44:
0f:af:13:e7:e8:ea:c6:1e:55:e5:74:50:62:18:e6:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:F4:F6:37:14:8E:4F:BD:1A:BE:27:2E:ED:BD:FF:FC:9A:CC:EA
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:d0:c4:07:20:ea:97:a8:60:af:ae:80:ca:6c:43:c7:46:
51:06:bc:cd:dd:52:a4:23:be:ec:79:81:2d:00:a4:f6:ea:83:
84:c6:c7:15:39:8d:63:d3:a1:e6:03:62:48:30:fb:d5:87:e0:
c3:c8:cd:7e:8a:f5:a9:59:99:41:b9:6b:65:bf:f6:34:b0:26:
2b:f4:c4:d8:e9:0e:ed:a1:48:14:87:39:32:1e:7d:82:2a:e5:
72:b5:c2:ae:31:97:b9:d6:1d:f7:41:de:cd:ab:0b:97:b4:c7:
54:a5:90:42:b6:78:f5:df:f3:e7:1d:8e:0f:c0:d7:85:b2:54:
e8:2b:3d:54:ff:49:5f:9b:ec:2c:c0:d5:72:90:6f:57:57:bf:
aa:20:1d:3d:12:4f:d8:bb:c4:4d:0d:01:77:15:c8:d1:27:bb:
10:36:0f:64:91:f7:35:a5:e7:d7:8e:3f:aa:44:d0:21:9e:fd:
5f:bd:13:c2:cb:00:d2:7f:ef:49:cc:05:d8:cf:6d:31:84:3d:
70:4f:61:42:d8:14:d7:ac:f8:84:2e:bd:6c:30:29:90:49:77:
0f:af:5d:dc:c1:63:08:08:99:50:0d:55:ba:91:2c:b3:ae:7e:
ec:dd:74:f3:fb:e3:ba:d8:e7:1d:73:f6:c5:0d:3a:d5:9b:5e:
2d:13:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:22:02 2025 by rpki-client