Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: 9jifH7Fo6Oei6W6eLu0iKvuYr8V5BIc2yrnrH7R7ZpA=
Subject key identifier: 2E:C3:2B:B9:51:3C:53:E2:F1:2F:74:4D:F4:A5:7A:68:A7:1C:4A:E7
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019A24785A9A4518A1E6DE0310C08DD706A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:00:58 +0000
Manifest this update: Mon 27 Oct 2025 07:00:58 +0000
Manifest next update: Tue 28 Oct 2025 07:00:58 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 8tquH/pWUF8Ha2ALpkeURibGmjObYxhFGvKyL8RKxSQ=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:5a:9a:45:18:a1:e6:de:03:10:c0:8d:d7:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Oct 27 07:00:58 2025 GMT
Not After : Oct 28 07:00:58 2025 GMT
Subject: CN=2ec32bb9513c53e2f12f744df4a57a68a71c4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:b5:f1:2f:d5:55:7b:5f:eb:ed:59:f4:15:
99:67:4a:e7:cd:22:f7:a1:2e:5c:de:79:53:5c:8c:
11:f6:84:ed:16:b9:70:1d:4f:70:96:07:42:1d:c8:
c9:fc:44:82:84:c2:16:88:05:5d:4a:28:1b:8f:79:
22:2c:fa:81:a2:f1:46:62:58:97:2e:f3:76:55:09:
75:11:35:64:7d:75:77:6b:ee:aa:df:49:6f:6d:f5:
e9:a4:2c:2c:a4:b1:b6:3c:39:9d:90:3f:c3:a7:af:
af:3b:c1:2c:72:1b:d5:f5:5f:93:d6:1a:70:e7:79:
3a:bb:fe:b4:98:23:d3:a8:22:2e:a0:79:4b:4f:3e:
df:28:ca:ad:be:ec:83:95:0b:71:01:55:61:f1:b1:
23:3b:c2:51:fb:d9:fa:dc:79:c4:47:84:c9:6a:7d:
a0:d1:65:0d:14:bc:e5:cc:32:7a:11:5a:bf:49:fd:
81:06:9a:d6:67:dc:1c:39:04:40:51:46:a8:21:82:
bf:3d:2f:8b:dd:ec:f6:2d:51:6d:57:a2:4a:de:2c:
59:05:56:79:e5:fa:b9:9b:b9:66:c0:e6:1d:31:5f:
ac:55:3a:b9:d8:cd:24:a7:71:07:80:fb:80:99:9a:
5c:01:50:70:c1:27:59:6e:28:1c:03:66:d1:eb:34:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:2B:B9:51:3C:53:E2:F1:2F:74:4D:F4:A5:7A:68:A7:1C:4A:E7
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:93:46:d9:17:66:8f:ef:9b:86:fa:26:58:99:c6:27:ea:67:
ae:37:6c:75:6f:00:1d:c1:12:f9:b6:f4:d0:0e:65:df:63:c3:
4c:d8:0d:91:09:ab:08:1b:ef:66:1c:19:18:cc:46:d9:23:a1:
7e:21:5e:ef:e3:14:b9:2f:86:68:c6:ae:64:1a:39:a4:dd:53:
46:e2:89:89:50:a3:79:e1:c5:bf:ad:be:35:c3:b9:f5:b3:c0:
3f:2d:e1:b0:00:ad:87:92:d3:8f:b7:05:93:3f:6e:34:0b:b5:
d7:4a:94:fe:20:76:9d:75:d7:8f:db:b5:35:6c:9f:52:76:82:
f2:eb:87:25:44:b4:ac:47:4e:c3:4a:b1:74:1f:1e:ab:5f:ab:
10:bc:08:2b:43:31:6a:8b:1b:33:19:f0:aa:fa:93:e8:72:83:
b9:c2:ea:11:89:a3:f8:b7:2f:1e:00:1f:9d:5c:3f:a9:3a:72:
d8:77:3b:68:b5:c9:72:ba:55:5b:07:3e:66:66:ec:02:6b:92:
ad:95:93:10:ab:9c:59:c4:4e:bb:65:05:17:4e:5f:4b:49:ed:
34:4a:69:5b:91:bd:2f:1f:27:07:20:18:e0:2e:8b:b6:9e:d2:
60:33:fc:0c:4b:78:64:de:68:57:9c:18:28:79:18:7c:37:2a:
94:c4:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:24:41 2025 by rpki-client