Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: dg18wtIFdtp0w15XdOvXj8bTmVI1QYnAT4uMuGRUsF8=
Subject key identifier: BA:CD:33:BF:D7:BD:3F:41:D4:EE:31:BB:E7:A3:E7:4E:0E:CC:A0:C9
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019A228A3EE288D9FA25D29611D9C6A5A1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1706
Signing time: Sun 26 Oct 2025 22:01:16 +0000
Manifest this update: Sun 26 Oct 2025 22:01:16 +0000
Manifest next update: Mon 27 Oct 2025 22:01:16 +0000
Files and hashes: 1: ETv26zxQcsr8JhZ4MeGRkRkjDDY.roa (hash: V/KbOS0vpdDJobu1pDGY/r9sUVjvdSgLOWgc2BMLZzY=)
2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: Qk+5j+eznZffa0x/PwhyFJVYBQAdsvKfl0BAWhUYxwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:3e:e2:88:d9:fa:25:d2:96:11:d9:c6:a5:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Oct 26 22:01:16 2025 GMT
Not After : Oct 27 22:01:16 2025 GMT
Subject: CN=bacd33bfd7bd3f41d4ee31bbe7a3e74e0ecca0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:00:09:66:c0:78:47:74:84:5c:8e:25:67:
96:1a:4b:21:4b:77:f8:39:b1:57:c4:b3:38:65:8b:
67:ba:6d:2e:a5:bd:6b:d8:f8:a5:73:c9:53:9d:39:
72:6a:57:b7:b2:98:03:e4:f9:a9:21:72:57:18:35:
ea:79:83:e4:fb:5b:c2:b8:ae:97:c7:e1:48:35:e1:
aa:42:0d:d1:15:60:87:02:72:75:72:be:b4:70:46:
cb:bd:e3:ea:1c:7e:67:41:84:fd:64:ea:b3:46:86:
9b:49:51:03:30:18:9d:ff:7a:0d:ae:c8:6d:73:dc:
b2:9b:cf:01:40:7c:1f:fa:b0:d6:4e:7d:03:08:06:
da:02:b9:05:ef:0f:56:e0:6e:c8:ab:da:eb:96:2e:
f7:a8:fc:80:e2:74:86:fc:d8:ab:f0:2f:e6:ce:e7:
1b:d1:13:46:87:67:97:50:1c:d0:a1:bb:02:cb:f0:
cc:63:3f:3d:8f:51:c0:c3:ec:4b:ca:3d:5a:da:1f:
f3:b5:bf:ac:e0:4d:48:be:4d:7f:b2:b2:25:c2:ba:
09:81:28:18:59:f3:62:1b:91:b6:39:ca:81:ab:0d:
75:13:06:ed:58:55:08:0b:4a:9b:fc:16:6e:53:3d:
6c:d5:a4:40:71:6f:ba:42:b3:e3:cf:38:e5:2c:c4:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:33:BF:D7:BD:3F:41:D4:EE:31:BB:E7:A3:E7:4E:0E:CC:A0:C9
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bd:a6:40:36:b4:af:1b:3e:5a:46:23:c5:92:f5:97:66:df:
4c:f1:18:c1:17:77:c5:d7:38:7c:c8:f4:cf:0c:d6:c7:f2:01:
91:aa:d2:0d:a4:1d:e3:1b:5c:75:8a:b2:ca:b4:0f:bb:05:99:
30:44:ee:f1:1f:76:18:c1:ce:61:88:68:3f:ab:84:47:54:36:
d1:21:d9:89:a4:0e:4f:84:5b:f8:57:43:4e:3b:e0:c5:25:8e:
d3:97:68:70:49:c6:90:1d:a3:82:35:6b:13:2f:5c:3d:f8:09:
f4:be:b2:b1:65:77:8f:aa:87:b4:e8:af:f8:51:72:da:c9:ee:
62:64:21:14:96:ad:8b:99:56:75:6d:cc:43:8e:0f:b5:da:d3:
4f:10:34:7b:87:c0:8a:c8:4e:c2:9d:e7:ff:a2:5b:60:0e:40:
68:cd:73:df:c1:4a:8a:04:ef:73:dc:05:92:e6:09:c3:e0:22:
e5:65:64:d9:4f:06:ec:9f:68:18:22:7e:e9:9b:b2:df:45:5d:
d3:f1:06:cb:43:f2:35:b8:e1:00:75:b2:92:76:1b:7a:10:d7:
86:ed:42:35:94:0d:9d:89:67:7f:65:fc:41:83:8b:e9:98:57:
e3:e8:24:90:45:5a:15:52:2b:82:5e:c0:6f:9f:e1:a1:c6:6f:
b9:10:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:21 2025 by rpki-client