Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: pXAfCi2nIcQLlpWYjD3ECI4R0qoYuOSGOW335rN3A78=
Subject key identifier: 9C:17:CD:8E:2D:65:51:B3:31:AE:17:BC:D3:38:CA:23:7F:37:F7:C3
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019A228AF7B2FEDC03BAD82E253A61A51CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 22:02:03 +0000
Manifest this update: Sun 26 Oct 2025 22:02:03 +0000
Manifest next update: Mon 27 Oct 2025 22:02:03 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: IxmrG5edeQKXa17FU7mmTApiL+QNnmHVHbUZqioKOok=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:f7:b2:fe:dc:03:ba:d8:2e:25:3a:61:a5:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Oct 26 22:02:03 2025 GMT
Not After : Oct 27 22:02:03 2025 GMT
Subject: CN=9c17cd8e2d6551b331ae17bcd338ca237f37f7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:55:46:63:56:dc:b5:86:ea:b9:14:44:6d:
67:92:95:f4:b1:49:2e:5e:38:3b:08:6f:2d:8c:fb:
8b:71:1e:c8:51:0d:27:3d:95:bb:c5:73:02:73:6d:
c3:05:d4:52:d6:00:80:f1:02:59:73:f0:fe:8e:6c:
47:8d:68:5f:c8:ac:89:9d:49:9a:d8:60:ff:41:61:
29:a5:65:9e:52:f2:72:d0:b7:33:8e:e9:07:1c:38:
61:b6:7c:dd:27:59:fb:d5:5c:b9:ae:e0:da:b2:04:
d3:4b:9a:da:2a:31:93:4a:43:bb:2e:0f:37:6d:9a:
cb:26:cd:ab:49:44:3f:e5:43:32:58:20:f7:0f:9c:
94:7a:92:47:f7:cf:d9:10:88:50:9f:b1:3f:09:c5:
a7:fa:c3:3d:9d:60:d8:05:2b:04:4c:07:43:3a:e1:
12:33:52:c4:86:57:5b:10:9b:bc:c5:2a:0d:97:5a:
ef:7f:bd:51:f3:6c:de:34:26:a2:5e:78:7f:f6:4c:
7c:3f:e9:eb:ae:80:9f:53:b6:d3:67:11:2f:89:0b:
4b:38:1a:50:58:cf:7d:9e:2b:e8:b1:e5:49:83:9b:
cf:5b:89:0e:e5:ef:f4:87:df:9b:58:5f:98:61:a6:
5c:dc:c6:80:68:93:e8:d0:5b:53:6d:fb:52:74:cb:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:CD:8E:2D:65:51:B3:31:AE:17:BC:D3:38:CA:23:7F:37:F7:C3
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e9:84:2f:5a:a1:48:d3:4e:28:4c:26:0a:c4:67:16:b7:b8:
21:31:4b:d5:de:d8:4e:6b:56:89:22:f0:0c:c1:50:c5:7f:c4:
3e:38:23:94:9d:d5:67:4d:0c:32:f9:9f:14:58:75:8c:b7:7a:
35:50:87:ad:11:74:b4:69:35:98:b3:0a:9f:39:e0:76:34:4e:
94:19:89:60:0e:7e:41:f1:75:46:28:4a:da:06:bc:cc:73:0d:
dd:22:70:a0:a8:17:85:24:87:c6:aa:a5:81:7e:e3:62:0e:29:
25:a5:8a:e5:ac:c9:60:ed:e4:50:ed:61:6e:c5:06:1e:b8:1f:
2e:11:30:65:3e:5e:ec:ea:fb:2e:fc:28:0d:4f:68:d9:10:d4:
30:9e:5e:78:a0:6b:ae:69:59:be:1f:e5:70:2a:0c:ea:ba:ee:
86:17:dc:c6:d0:25:06:4c:9d:03:06:a3:4d:1f:63:15:9a:35:
0a:27:98:c0:01:cf:c2:b1:14:9a:17:a5:c0:6c:12:25:32:0f:
b0:e5:72:8c:a5:93:4a:57:69:bf:c2:b3:28:16:2b:24:d5:2e:
bd:a3:9b:99:d6:99:40:7e:f8:35:92:18:09:36:d8:71:1f:89:
71:09:2a:b5:3d:e3:ba:1e:73:b9:42:c9:a7:4a:66:e1:37:e1:
c0:08:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:58 2025 by rpki-client