Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier: BVc2kqtBE7FF1MvT7Ct0PEeZY4gW2AK8FFU6L5fA7qA=
Subject key identifier: B0:C6:48:19:8E:6C:98:09:8B:BD:3A:87:C4:1E:64:F4:FE:21:F6:4C
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial: 019A53AD08C4D5F0ECDFC4CEFC89EC847AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number: 14DC
Signing time: Wed 05 Nov 2025 11:00:40 +0000
Manifest this update: Wed 05 Nov 2025 11:00:40 +0000
Manifest next update: Thu 06 Nov 2025 11:00:40 +0000
Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: yrDYGF2xqSxULhRLnrzISrqOgxHRM5eSxIHOqyKYclE=)
2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:08:c4:d5:f0:ec:df:c4:ce:fc:89:ec:84:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Validity
Not Before: Nov 5 11:00:40 2025 GMT
Not After : Nov 6 11:00:40 2025 GMT
Subject: CN=b0c648198e6c98098bbd3a87c41e64f4fe21f64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:e0:bd:c3:94:7b:8c:ce:1e:3a:c7:ea:94:
5d:75:17:aa:de:f2:d2:c0:90:47:55:af:1a:39:bd:
30:f1:6e:e9:a9:0b:e5:c8:fd:6d:43:d4:08:36:af:
91:bb:ce:48:f5:14:4a:32:34:12:16:e8:bc:f9:c6:
d7:1d:85:0e:c1:35:5a:02:65:3f:7e:25:30:d5:ee:
f0:ce:d9:ab:9a:05:e1:ab:ed:63:36:cc:94:1d:ff:
10:94:68:42:50:29:77:3b:7f:80:47:e1:7a:f9:4e:
cc:57:18:81:51:03:af:4d:a9:f2:93:16:c4:70:d5:
f5:06:60:d7:b2:69:ee:05:79:c9:e9:bb:a2:dc:dc:
1f:a1:ea:94:a9:2a:9f:56:cd:22:51:86:0b:6c:45:
ab:a2:ee:58:d6:f9:34:81:fe:44:87:4b:61:11:99:
25:05:bf:4c:f4:a7:00:40:9a:24:a7:d2:3b:04:d2:
f0:06:06:b5:cf:8a:be:85:02:d1:c0:bf:21:ac:2c:
8a:fc:b3:8d:72:08:50:13:9e:b7:59:f4:f3:37:e2:
13:2a:8d:f5:3f:ca:2c:1e:df:74:4e:47:e9:a4:7e:
42:e9:0e:7f:95:50:83:60:a8:28:38:6c:d9:15:ad:
99:c2:75:73:53:6e:a6:d3:29:d5:27:74:d6:5a:42:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:48:19:8E:6C:98:09:8B:BD:3A:87:C4:1E:64:F4:FE:21:F6:4C
X509v3 Authority Key Identifier:
keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:47:93:2e:6e:3f:02:b4:70:e7:47:65:47:ca:13:1e:fe:
2e:76:9a:ab:b6:b1:6f:84:ea:e2:ed:f9:c1:d5:af:ee:38:fa:
81:b5:6f:7a:23:38:67:55:a7:4b:48:b0:ba:46:9f:3e:86:3b:
7d:e6:a0:f4:cc:3d:a5:d7:f7:7b:c7:ee:c2:89:71:2f:af:56:
76:93:2c:12:68:1e:20:4f:c4:43:21:bf:2d:56:79:b5:5a:80:
4c:0e:49:26:13:66:e4:f6:29:e0:fc:a3:96:9a:d7:f6:7a:10:
7c:e8:32:f1:0d:6e:d2:6c:a2:a0:6d:61:17:b5:a5:7f:ef:1d:
51:11:08:70:f9:4e:a7:e9:69:4f:a5:79:4d:20:8b:1e:e0:6f:
17:b5:a3:11:de:03:7e:6f:71:f3:da:bf:b3:57:09:0b:b1:be:
8f:01:5e:b1:c5:72:a3:df:3d:e6:bf:2f:f3:a6:a6:94:2a:83:
65:80:b2:6f:d3:97:4b:37:d5:3d:5f:2e:ab:cb:8c:63:47:4e:
b6:75:6e:3f:27:fd:10:d1:82:e0:52:ce:be:6e:35:c3:c2:49:
35:12:2a:70:0c:22:e1:32:01:1f:00:2c:f3:53:d3:a6:be:ca:
bb:3d:e0:35:47:d5:9a:61:16:82:4e:c2:a0:a5:c1:40:5c:58:
38:35:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:58 2025 by rpki-client