Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: uHHiyNkQacNBZn0l+QNFEh+wY/6b7t2F0AJpiH4lGgs=
Subject key identifier: 97:D2:45:72:F1:6A:17:BC:B0:06:10:D6:CF:6C:73:B7:98:08:8B:17
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019A70DC5CEF3A2BD5B636532D81554E6A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 1167
Signing time: Tue 11 Nov 2025 03:01:21 +0000
Manifest this update: Tue 11 Nov 2025 03:01:21 +0000
Manifest next update: Wed 12 Nov 2025 03:01:21 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: EuF+mPpx5tSevV+iwDYDvM/99jAeC/+tll1H++dNkr8=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5c:ef:3a:2b:d5:b6:36:53:2d:81:55:4e:6a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Nov 11 03:01:21 2025 GMT
Not After : Nov 12 03:01:21 2025 GMT
Subject: CN=97d24572f16a17bcb00610d6cf6c73b798088b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:54:e1:d0:5b:e9:19:93:51:26:0a:fa:d7:
3d:31:1a:bb:9f:eb:c1:40:22:98:a1:90:ba:12:5b:
c5:62:18:aa:ea:0e:dd:95:38:e6:eb:db:a2:47:d9:
f4:19:8e:7e:2a:d7:0b:f6:d3:ad:fc:e1:0e:9d:cd:
e1:0d:9d:6a:56:39:9e:a2:84:f7:94:8a:af:f5:ed:
4a:d1:22:34:c5:41:69:03:f8:d8:db:35:73:67:33:
49:1f:bc:98:59:ad:62:b4:d7:7a:b1:ce:5a:75:16:
fa:77:f5:f5:16:d9:fb:87:dc:68:0e:2f:03:54:d6:
78:41:37:e4:49:30:30:29:5e:f9:d1:1e:c0:34:c0:
4b:53:ce:22:2b:ea:a9:e8:3b:03:12:6d:62:86:d0:
45:27:11:fd:92:92:b7:c9:54:ad:78:93:82:cd:ef:
7d:59:12:49:62:34:ef:f0:98:01:4f:6b:13:3e:67:
7c:91:6f:a7:ad:26:9a:5d:6a:61:63:48:22:cf:60:
53:ad:2d:c5:09:70:c3:b5:51:de:e7:6e:ed:f5:e9:
83:48:7b:fe:d3:1b:d1:7b:eb:dd:dd:32:1a:f3:33:
1b:91:8e:c1:ca:05:da:ed:5b:ae:fe:0e:cb:bc:fb:
1d:0e:5d:4c:68:d6:e1:c5:73:99:cc:d6:6a:9c:51:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:45:72:F1:6A:17:BC:B0:06:10:D6:CF:6C:73:B7:98:08:8B:17
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:b9:8c:3f:43:3f:6a:a2:4c:ee:61:9b:34:17:b5:8d:20:
da:a5:15:e7:12:6c:40:76:bc:3b:d2:25:b1:67:d2:d0:a1:bd:
3e:56:5e:33:29:a1:90:de:dd:ee:7c:b8:8e:e5:3a:6d:e4:a1:
42:58:40:c1:55:5a:30:31:9f:ae:1d:b3:0d:a2:47:3b:cf:a9:
68:a5:f8:dc:39:35:4d:a2:60:d8:b0:2a:d7:bf:e1:4c:9f:82:
22:a2:e7:c1:5e:98:f7:ad:c4:c3:19:13:e2:50:64:0d:b7:6e:
a7:13:7b:14:52:42:4e:d6:72:c7:dc:23:cb:ed:f8:95:92:e4:
cb:96:ba:91:bd:a3:c0:74:91:dc:1c:8a:11:05:cc:c7:17:9c:
1c:91:c4:14:dd:d6:03:25:4a:41:25:fc:da:cd:2f:e9:b3:c6:
ae:16:29:cf:7f:56:b1:06:83:8f:ec:74:d2:ce:d8:7a:86:a1:
23:da:cd:5f:29:6d:df:c7:3b:69:44:ef:83:7f:fe:4c:e3:49:
01:c9:d2:a7:aa:3b:62:32:13:10:4b:31:25:ea:65:3a:70:f0:
78:d8:e5:5f:c3:f6:57:48:c6:2d:be:97:7e:21:d9:fc:d7:30:
ca:06:c9:8b:4a:fd:68:41:80:6b:44:ef:7d:86:f4:65:f4:19:
3d:86:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:18 2025 by rpki-client