Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json)
Hash identifier: NcZca+FcrYFW+M4P1I+eUhc5qpt55gEkoBJSfKfEgk8=
Subject key identifier: 1C:A9:7B:CD:7D:88:42:04:64:8A:4D:B7:81:5F:1E:00:70:E6:52:A1
Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Certificate serial: 019A4F2AF5C008BE0100849D8365B44D3EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
Manifest number: 0568
Signing time: Tue 04 Nov 2025 14:00:06 +0000
Manifest this update: Tue 04 Nov 2025 14:00:06 +0000
Manifest next update: Wed 05 Nov 2025 14:00:06 +0000
Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=)
2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: 0Cza/5a8gQSrZX2NrKAOjQT4V4pChbjKcRS1wh8d7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f5:c0:08:be:01:00:84:9d:83:65:b4:4d:3e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5
Validity
Not Before: Nov 4 14:00:06 2025 GMT
Not After : Nov 5 14:00:06 2025 GMT
Subject: CN=1ca97bcd7d884204648a4db7815f1e0070e652a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:dd:d6:ee:2e:c4:88:19:86:59:0a:b5:01:
0f:f1:04:8c:c0:b6:39:98:35:10:03:9b:81:5c:e3:
02:c8:1a:c3:e1:d3:47:6e:49:e1:e8:42:61:2b:83:
25:01:99:b9:78:21:1d:4f:f5:29:ad:52:1e:90:29:
c7:3b:c5:0f:cb:09:56:4d:9f:61:c6:cd:f9:52:36:
86:ae:b2:af:1a:4f:09:72:82:df:e9:11:2f:e6:5a:
d5:be:05:e8:3c:10:3d:1a:96:f7:0e:02:a8:c5:69:
54:c4:7d:85:2e:85:e3:7b:90:d4:cb:8d:80:ec:6f:
46:71:ad:8b:79:11:0b:cc:1e:d7:f5:e5:fb:4e:94:
15:cf:a3:af:e7:fe:f4:35:fd:30:02:32:1a:4b:1a:
38:5c:18:0a:4f:d8:12:8c:a9:13:22:09:6b:38:63:
8f:ae:c7:66:27:5e:40:ac:a2:4b:3f:99:eb:1e:cf:
5b:1f:7d:ee:99:06:72:77:bc:f7:d4:08:9f:a2:92:
1c:32:f5:65:b1:51:57:db:aa:6f:24:9d:11:a1:d1:
2b:c0:74:4a:55:8e:03:44:94:33:25:a5:fe:d7:07:
3d:e9:be:23:27:9f:f3:43:3f:6c:84:d0:0c:e6:2a:
6f:8b:56:40:15:c8:2b:d2:48:90:a4:e1:cb:7a:65:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:7B:CD:7D:88:42:04:64:8A:4D:B7:81:5F:1E:00:70:E6:52:A1
X509v3 Authority Key Identifier:
keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:44:5c:aa:bd:74:40:2c:45:a8:a2:cd:74:6c:d5:35:a3:
ee:6d:7b:bd:f1:13:b9:0c:fd:ec:bf:ed:79:ca:6e:41:21:7d:
35:7b:27:23:48:c8:27:88:9c:4c:e3:2c:1e:4d:41:4f:1e:9f:
31:27:40:cd:f8:4a:cd:21:0e:83:9b:69:63:a5:2f:95:a6:6e:
44:5d:c2:a2:fe:ff:7d:82:7c:11:83:e5:a9:c5:2c:4d:5b:2e:
38:62:07:1a:5a:31:82:e7:56:44:ba:15:c7:f9:3e:88:73:15:
94:9e:de:16:e5:3c:34:54:39:a6:7c:ea:81:c4:14:e9:9a:c3:
4c:b7:f9:4e:de:a7:e8:d0:a8:50:bc:67:32:b8:66:22:1b:28:
a0:b4:b3:fd:c1:41:c3:c9:34:0c:84:87:91:6e:c0:a4:c8:73:
8e:65:69:ab:5d:db:43:14:5b:4f:9d:cb:ec:42:28:15:29:42:
b2:ff:38:4a:af:be:5c:5e:9c:92:e1:ae:bb:88:14:0d:4e:91:
b8:d9:89:f0:3b:e0:b3:c5:a8:9a:90:9d:a1:b6:47:8c:1f:01:
a6:c4:92:95:06:96:3c:4b:05:54:75:09:8c:c6:ff:34:f6:75:
e4:b5:28:02:0c:64:47:73:5e:fc:88:90:6a:46:37:90:2a:aa:
a8:a3:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:52 2025 by rpki-client