Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: JZAXUGF89SYS6k36CbWQl7PuItnV622gmhkms/+G9X8=
Subject key identifier: 56:70:C0:29:1D:A5:92:A6:27:F1:63:44:35:F2:B2:56:EE:27:C8:B6
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 019A4D73F6D1FF22A5CD452BE6515C99F4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 06DD
Signing time: Tue 04 Nov 2025 06:00:36 +0000
Manifest this update: Tue 04 Nov 2025 06:00:36 +0000
Manifest next update: Wed 05 Nov 2025 06:00:36 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: 9ZLZfDoqizkw0iEOdpBsQxfUn33GqwNTRmJu7KUNyWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f6:d1:ff:22:a5:cd:45:2b:e6:51:5c:99:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Nov 4 06:00:36 2025 GMT
Not After : Nov 5 06:00:36 2025 GMT
Subject: CN=5670c0291da592a627f1634435f2b256ee27c8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:d5:2e:7d:fc:67:26:1a:a3:55:7b:46:e5:
c0:f3:ee:cd:4c:59:29:6c:8c:50:2b:7a:58:9f:53:
ed:4f:a7:37:4b:02:6a:cd:65:6e:63:7c:da:aa:fb:
48:50:89:04:6e:7e:d3:56:db:09:b1:81:71:17:3c:
f4:aa:8d:23:ad:27:d0:f1:b0:55:2d:8f:d7:4d:2e:
de:6c:21:14:0f:55:98:5a:87:b4:c6:64:ca:f7:df:
f1:bb:33:11:13:fa:d9:4f:05:50:51:a2:9d:e8:ff:
ec:cb:38:16:c6:dc:b6:3d:39:2d:a7:57:09:11:88:
71:8c:1a:af:58:5b:3c:e9:0d:17:bd:38:9d:23:34:
e5:d4:00:ab:d3:2d:ea:80:c0:b2:1a:8e:73:b2:70:
cf:b6:ab:52:3e:39:af:62:b2:5b:36:6b:d1:dc:9a:
ee:e7:f1:e4:21:d0:c3:8f:c5:9f:ed:25:f9:12:f8:
77:38:d2:e5:a0:f3:43:49:dc:16:36:3f:76:3e:82:
cf:b9:94:82:99:5c:4c:a6:69:31:24:6b:f7:b5:8b:
b4:25:1c:51:6f:94:81:dc:d4:c3:e5:7f:03:1e:4a:
dd:14:20:ae:05:10:39:22:c3:8a:af:25:1c:b1:b9:
d2:64:33:2c:bc:2e:f6:e2:f8:fd:9b:87:88:f5:bd:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:C0:29:1D:A5:92:A6:27:F1:63:44:35:F2:B2:56:EE:27:C8:B6
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:82:20:d7:25:01:22:a3:c7:e3:c5:b4:c3:95:37:7c:68:93:
c8:a1:c0:97:00:0d:46:9b:05:97:cd:89:9a:40:7e:11:a6:c8:
39:a5:24:c2:c0:1c:2b:d9:59:4c:db:93:3b:99:5d:28:60:08:
e2:d7:5f:6a:80:97:2f:8c:7f:fc:ee:26:5b:c2:c8:cd:f5:ab:
ee:c7:56:48:a0:4b:69:98:a8:15:09:8a:a0:d8:a8:29:14:dd:
35:fe:a9:ca:8d:24:17:13:bd:ee:ae:27:9c:57:a6:52:57:35:
0a:e3:3e:98:7a:3d:d3:b6:91:41:c2:3d:f7:cf:32:58:54:e3:
c4:da:b7:eb:65:8d:63:fe:a7:0f:41:df:e5:e4:34:30:4b:90:
27:69:05:7a:47:6f:fd:60:d9:e8:ff:c8:08:f1:7c:b3:96:f9:
dc:b7:d7:34:4b:a5:77:8c:b8:9d:b9:4c:15:4c:89:06:92:df:
b4:aa:ab:63:a5:85:91:e5:06:51:af:b5:60:ef:ab:b6:55:cb:
31:8d:b3:c4:30:08:86:f8:ad:ba:8e:33:d0:ef:9c:c6:d6:9b:
04:92:6d:1d:22:05:8b:82:ad:71:f3:c7:b5:11:08:2c:a0:af:
ed:60:c7:e7:b7:7e:55:ad:2b:2c:f8:10:0b:40:e5:a3:9e:e1:
65:74:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:27 2025 by rpki-client