Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: K30FsbCStfx1D8XMc6gDpebiW29BSH3WzIiT8jNyLc0=
Subject key identifier: 08:36:3C:E4:00:3E:15:8A:27:AC:CE:15:F4:FF:FE:9F:DB:48:8A:57
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 019A5299D6A2295EE29BC7C5A8CE397255B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 1656
Signing time: Wed 05 Nov 2025 06:00:04 +0000
Manifest this update: Wed 05 Nov 2025 06:00:04 +0000
Manifest next update: Thu 06 Nov 2025 06:00:04 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: aJ8EQZ7d7wI12RR+UfS7tDId5JokX8g3vKrLk33cVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:d6:a2:29:5e:e2:9b:c7:c5:a8:ce:39:72:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Nov 5 06:00:04 2025 GMT
Not After : Nov 6 06:00:04 2025 GMT
Subject: CN=08363ce4003e158a27acce15f4fffe9fdb488a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:6c:f3:58:3b:83:a3:2f:86:9a:3c:7c:b7:
3b:f5:2b:5e:05:3f:30:25:2a:eb:cb:0e:1f:9a:7f:
f4:1d:02:d0:64:d8:5f:00:ba:ff:61:05:52:08:42:
73:73:1f:a9:81:ff:89:e8:b9:08:e9:13:f6:25:df:
30:0c:c8:2d:90:13:8a:f7:bb:4e:ea:4b:0b:85:fc:
33:f0:2b:9c:93:7d:c5:40:1e:cc:49:fd:c9:36:40:
08:2c:e2:b8:d3:67:55:ac:a6:0b:fd:de:5d:95:15:
b2:e7:67:88:1e:b8:df:52:b7:22:10:da:c4:71:bb:
bd:66:a4:c1:18:dc:f1:cb:67:63:ff:ec:97:e3:c4:
4e:f5:5c:46:cc:26:be:04:97:d0:62:80:e0:c7:6b:
96:a9:16:e2:f4:1a:46:db:4e:55:60:5e:f6:ff:d5:
06:16:af:5e:ae:13:45:42:a8:5e:db:75:0c:3b:02:
75:82:ad:19:39:5f:d7:ee:be:c3:b5:8c:0c:28:81:
1d:4b:79:78:c7:0a:bf:87:9c:4b:71:38:95:de:30:
05:98:0d:f4:e8:6a:e8:07:88:8b:1a:4c:09:14:5d:
c5:ff:64:34:db:48:4c:ea:d1:4f:e1:8f:17:45:02:
fe:1b:18:a3:84:82:39:80:d6:52:d9:34:a8:d4:8b:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:36:3C:E4:00:3E:15:8A:27:AC:CE:15:F4:FF:FE:9F:DB:48:8A:57
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:40:ad:68:a4:11:89:5f:a3:65:f7:23:5e:a9:7c:b2:92:5c:
49:d1:91:c9:e3:fa:b8:f7:28:98:b8:44:8a:ca:40:c2:3d:6a:
f6:b6:6c:9d:cf:0e:cd:d1:db:74:93:62:4d:2b:19:d1:23:e1:
ae:16:19:d5:0a:1c:19:f4:ea:e6:bf:3e:35:9f:86:bd:c0:17:
35:a1:ae:85:13:af:fe:e5:23:3d:b0:a0:03:6a:e7:29:16:29:
d6:c9:f0:1c:1d:81:84:c2:fe:90:7c:ce:9d:7d:44:31:a6:e6:
49:af:83:42:95:76:c2:c9:06:e4:bb:7b:88:85:3a:2c:b6:0d:
e7:c7:83:66:b9:95:71:71:0d:7c:8d:97:8d:7f:21:07:cb:3f:
40:e1:a0:cd:c6:64:82:e1:36:4a:ec:b0:e9:4a:70:81:9b:5f:
ee:4c:b4:1b:51:5c:29:af:6e:74:43:8f:df:17:f3:f9:35:cb:
b3:35:63:de:d2:64:c4:d0:4f:c0:1c:a5:51:2b:02:f1:d3:d8:
ac:ae:b2:84:99:d5:28:ff:cd:c8:65:82:cd:04:3b:07:a2:37:
63:42:79:30:cd:18:c0:02:74:9f:6f:d8:2d:fb:96:41:13:b0:
28:ad:57:99:77:87:32:1b:9f:64:84:37:1d:a9:33:9f:1e:00:
bf:22:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:13:37 2025 by rpki-client