Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: OT7ykAuuYjXUPX4iWSQyPg+nEgy0Cz2qLKJPYQ23c6w=
Subject key identifier: 9D:96:4C:59:4C:8C:9B:A6:DE:D9:BC:A4:C1:47:92:4F:79:9C:D6:EC
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0198744FD3FB92562EE1FAA0FCE6A4E45FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 05E8
Signing time: Mon 04 Aug 2025 09:00:45 +0000
Manifest this update: Mon 04 Aug 2025 09:00:45 +0000
Manifest next update: Tue 05 Aug 2025 09:00:45 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: NxBy+Io64FfuvQk/2tAb31jk7aq5568xJ1PMS8rtH2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d3:fb:92:56:2e:e1:fa:a0:fc:e6:a4:e4:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Aug 4 09:00:45 2025 GMT
Not After : Aug 5 09:00:45 2025 GMT
Subject: CN=9d964c594c8c9ba6ded9bca4c147924f799cd6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:b7:65:02:7f:0d:66:01:ff:72:7a:47:24:
89:f1:c7:23:b5:e5:c0:4f:bf:70:f9:5b:bf:c1:7d:
60:6d:ff:d5:75:dc:ac:3c:d5:71:3a:41:4e:4c:71:
9a:63:99:74:0e:c8:e0:c0:b9:6b:11:d8:a4:88:65:
8b:bf:89:45:98:68:fe:dd:a4:57:18:9c:22:0d:fe:
74:ce:5f:9a:a5:35:4d:b8:6a:1e:22:b2:71:3d:9b:
8f:97:c6:d5:fd:f6:17:55:cd:2e:e1:09:d9:28:68:
0f:23:71:81:4a:03:73:dc:cc:2e:c6:d7:16:43:08:
41:4c:20:43:08:57:f5:87:af:5f:52:99:b5:2b:8e:
0d:7a:e0:22:dd:d0:d5:96:2c:d4:b7:06:25:8b:56:
ca:30:56:84:b3:5f:25:a2:63:50:b4:ee:aa:1d:31:
0b:ad:bb:2f:15:ee:9e:73:08:94:8b:e3:af:c3:e5:
88:0e:8a:b2:53:07:20:21:c0:2c:65:7c:92:d4:f4:
26:b6:d7:1f:12:9b:34:8f:20:7e:32:62:20:38:6f:
75:8f:3c:e1:eb:f7:de:8a:64:c3:05:6c:0a:af:15:
28:40:85:ec:bb:68:e5:7e:50:c1:be:81:a2:a6:1d:
d5:34:a8:fc:5c:fb:0f:84:a5:87:71:2f:ce:fb:2b:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:4C:59:4C:8C:9B:A6:DE:D9:BC:A4:C1:47:92:4F:79:9C:D6:EC
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8b:26:d8:ec:09:d8:9a:ba:6b:64:77:90:77:7e:ec:03:4b:
62:c5:04:d8:ab:aa:6e:9e:8e:d1:62:68:50:a0:63:d9:b7:5a:
4f:40:00:77:db:ce:6c:85:c6:f6:55:11:1a:43:f4:d7:01:ac:
76:f6:e4:2d:49:04:98:f5:7a:0c:32:13:18:6a:22:a5:ee:f9:
31:10:e6:b0:04:43:5c:27:a6:43:d4:48:cb:c6:c9:6c:5a:f6:
d0:61:cf:df:93:46:17:b1:09:cb:6b:4f:e2:e0:aa:4c:c9:48:
f0:1c:70:bb:da:92:5f:19:21:4b:4d:ed:dd:fe:24:42:ea:dd:
01:bc:83:d0:f9:c4:a9:df:3f:21:75:ce:65:96:03:0d:4f:2d:
34:75:28:93:6b:f1:c0:80:d3:5f:e9:03:b7:5f:49:bd:12:e6:
da:ae:d9:06:8c:86:d0:82:99:f8:8c:24:40:b3:3c:1f:2d:b6:
bc:2b:a5:bc:e0:18:53:9f:b8:e7:62:18:d9:60:b7:f6:15:4d:
27:ac:83:96:91:72:d3:e4:62:2a:c8:cb:ca:e5:99:b7:31:97:
3c:1d:9b:f5:7f:df:ea:db:53:cb:54:84:6a:43:ba:30:68:59:
8e:a4:37:c3:04:3d:82:9c:42:48:da:39:4b:e8:82:86:4c:33:
4c:b0:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:20:00 2025 by rpki-client