Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: 87XUWfPmahlaE2JCwmJN8uLbklcupBiOU60odbGU9JA=
Subject key identifier: A3:42:40:DA:C5:ED:ED:1B:0C:C1:D2:8F:49:F5:96:F4:01:5F:EC:D4
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019A706E2685542DAAED3CF45856239A31BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 0558
Signing time: Tue 11 Nov 2025 01:00:58 +0000
Manifest this update: Tue 11 Nov 2025 01:00:58 +0000
Manifest next update: Wed 12 Nov 2025 01:00:58 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: u5i0A1KDZPAnTHZa52zmgmMPeoBYvEZEbpFGEvKklEU=)
2: mpcpZSVPqHluaz87WJ0uN-9FKN0.roa (hash: 7rifYSX6qCoq1SQ259BqQ0Nwhu4OmIky6bHMjTs3HBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:26:85:54:2d:aa:ed:3c:f4:58:56:23:9a:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Nov 11 01:00:58 2025 GMT
Not After : Nov 12 01:00:58 2025 GMT
Subject: CN=a34240dac5eded1b0cc1d28f49f596f4015fecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:1b:3b:5a:e2:66:87:25:df:30:d9:1d:11:
25:90:c5:dd:fc:cb:0c:ad:1a:30:86:e1:51:e8:c0:
15:f6:21:14:0d:8f:81:4b:f3:d6:db:ad:bc:03:64:
5b:a1:9e:2b:30:cd:37:99:b0:62:48:2e:8e:b3:2d:
07:90:c0:14:b2:3e:16:b5:5d:69:6a:b5:56:7d:91:
34:6a:3a:f4:ac:8a:58:4e:63:0d:63:ce:3c:6b:28:
da:b7:e9:3d:2d:75:08:12:f5:7f:23:cf:03:e8:db:
7f:66:50:10:38:aa:1f:63:b4:90:f0:20:16:5d:8e:
08:19:59:a9:72:52:08:f4:1d:4c:91:27:8a:74:3b:
c4:c7:2e:78:25:d3:dc:81:ad:ec:a4:d5:74:34:c9:
c6:72:29:1c:76:8b:77:59:dd:ed:28:97:9a:4a:1a:
fe:61:b2:4f:76:1f:e8:61:84:79:1b:1c:2c:9d:d8:
4d:e3:6a:8a:97:cf:8b:13:75:f7:71:26:30:2d:2f:
c9:60:2d:fc:2e:09:f6:7d:1f:08:91:77:65:a2:e1:
b9:d0:8f:ba:b7:cb:63:f8:0c:b7:89:71:4b:43:c7:
0c:62:5b:bd:9e:f4:f2:a4:9f:97:0d:a9:54:e0:3c:
d1:71:92:9c:f5:d7:c4:de:eb:e6:1f:ba:32:3d:1f:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:40:DA:C5:ED:ED:1B:0C:C1:D2:8F:49:F5:96:F4:01:5F:EC:D4
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:f1:07:4a:04:09:25:79:65:e9:c3:98:d6:25:4e:9a:7c:
be:33:b6:f4:86:c5:65:78:c3:f3:43:63:ad:99:8a:15:75:65:
7b:d3:4a:66:b6:88:14:cc:a5:1f:2a:6d:36:12:a2:a5:d9:f7:
61:11:7c:02:99:e7:39:6d:3d:ab:95:30:75:d8:88:6e:21:6e:
28:4c:48:b3:da:0d:25:e3:65:d2:af:0e:04:75:b5:87:87:e8:
35:68:22:ef:f4:7a:9c:ab:51:a9:6d:ac:63:3b:d7:1a:3b:ec:
4d:bb:51:b1:69:aa:a1:fc:ed:e2:ad:af:c7:e2:4b:09:78:2b:
57:7f:12:11:9e:9a:81:f7:80:57:b4:89:c9:09:a8:fd:cd:d6:
f8:02:c1:0e:5c:55:63:1a:b1:6a:c7:f0:60:b0:a5:e8:54:2b:
48:c3:94:05:c6:4c:3a:50:8f:3a:ad:f9:b9:a4:d8:28:ce:1e:
89:48:2b:06:b1:d3:e8:47:3b:f1:bb:a9:47:ce:f0:e6:05:77:
e3:d5:d6:6d:18:cc:6d:c0:2e:f7:7b:fb:06:c6:84:7c:fa:94:
2c:25:24:fd:8f:e5:80:26:38:26:3b:13:e7:c7:54:01:1f:64:
76:16:02:e9:53:81:b5:31:12:8c:e9:fc:11:78:a0:9c:1a:8f:
a3:09:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:12 2025 by rpki-client