Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: NCqWDcFl8Up5+UHEu1djBgBFhMd0Y90Ol+CV8x+QZTU=
Subject key identifier: C6:B9:E3:46:21:35:8E:0B:87:88:AD:0D:D2:7A:7E:6D:D5:21:18:92
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019A1D2CB60C6CDC5A269147771B348ECA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0F88
Signing time: Sat 25 Oct 2025 21:01:00 +0000
Manifest this update: Sat 25 Oct 2025 21:01:00 +0000
Manifest next update: Sun 26 Oct 2025 21:01:00 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: u4Av5Cw2aL0GMZMimKxrFCXCoxJ4zpneuhti7Nh4WyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:b6:0c:6c:dc:5a:26:91:47:77:1b:34:8e:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Oct 25 21:01:00 2025 GMT
Not After : Oct 26 21:01:00 2025 GMT
Subject: CN=c6b9e34621358e0b8788ad0dd27a7e6dd5211892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:bb:97:0c:e4:d7:80:e5:56:90:54:36:3f:
69:65:d0:d4:f6:c8:80:ca:57:51:36:5c:a6:5c:31:
d7:d9:ce:f5:ea:e7:28:6b:b4:1f:da:d3:9e:10:92:
4b:53:fc:0a:b6:97:77:4f:43:ff:d5:67:28:8c:7a:
c2:f7:03:f8:67:c6:9c:e0:05:f1:b7:61:6d:da:e2:
2e:be:60:bf:8e:ee:b5:3b:bc:1c:17:2f:2b:e5:3e:
aa:f6:f1:68:32:c1:a7:cf:5a:ca:7f:26:99:e2:90:
a2:5e:a5:ff:ae:6d:52:be:68:fb:66:4d:27:6b:ad:
be:7a:1b:a3:e4:bc:18:a9:8b:4d:de:3c:64:24:60:
46:05:9d:66:80:c5:57:25:7a:04:d5:ce:e9:51:8d:
5a:02:bb:08:d8:c6:e9:ba:0a:40:d6:18:85:29:1c:
b1:45:42:19:f8:74:ed:52:e5:f6:22:2a:3f:b7:be:
ea:e0:1d:40:19:a5:68:cd:55:9d:0f:e8:63:95:7b:
94:24:45:37:1c:2e:cf:85:ad:57:9d:bd:84:1d:cb:
13:e0:a5:c3:98:ac:27:bd:17:b6:e4:72:6c:34:7b:
3d:45:4f:4c:fb:97:1f:c0:a6:4a:40:bd:4a:22:be:
a2:13:67:78:cf:b4:3d:16:5e:f8:bd:67:23:7c:3f:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:E3:46:21:35:8E:0B:87:88:AD:0D:D2:7A:7E:6D:D5:21:18:92
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:19:c6:ab:4c:52:2f:33:cc:79:f3:7d:c1:82:c9:8f:0d:
c0:50:77:d3:55:28:61:0b:50:c1:df:0f:e5:70:92:aa:d8:46:
18:b1:8d:35:b4:78:47:4d:bc:42:75:f0:88:68:6b:31:4a:d1:
c9:af:09:c2:3f:ad:e1:91:c9:58:02:9b:b6:72:c6:81:98:fe:
c3:cd:a4:96:bb:0a:8e:56:71:2a:1c:de:a7:2b:a9:c4:fe:85:
20:5f:c4:28:da:51:e1:47:f7:33:11:2a:ec:87:81:65:c4:db:
f4:02:75:b7:88:15:19:a0:d0:3e:16:df:3b:f1:bd:72:b6:af:
ae:1c:a0:f0:97:25:46:2c:28:ad:64:f6:40:29:a7:d4:cf:2b:
66:f5:ab:0e:a0:ab:89:b1:fa:e5:be:0a:fc:46:d9:7a:7e:54:
4a:ed:d5:f9:b4:83:0f:b9:67:2c:a2:5a:b4:2b:7b:bd:9b:60:
17:44:5a:83:79:75:16:41:93:43:42:61:30:d3:f8:65:d4:05:
9e:0d:a4:54:e4:2f:7c:3d:c3:4b:a5:4b:8c:72:6d:23:89:e9:
58:cf:2d:eb:07:e5:4a:bb:b7:f7:16:51:52:ed:d4:c9:96:11:
a5:cd:9a:a5:53:c9:f0:e8:23:e6:1b:3c:d3:b3:57:9b:00:03:
77:75:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:41:24 2025 by rpki-client