Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: nKkx9HMwp0I9YVddQXSFrgLV7Bi7uVsZHmao+P/AS+c=
Subject key identifier: 8D:5E:5C:5E:85:44:0E:C3:D5:D6:FB:BD:DC:19:4B:2E:B7:21:41:51
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 019A4EF5D3979C587318B10E5D0FB1BC178D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 0675
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: Aab5/XBFnSDi+VMyooK5cMlDo/p4S4O91zNzTikc4q4=)
3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=)
4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d3:97:9c:58:73:18:b1:0e:5d:0f:b1:bc:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=8d5e5c5e85440ec3d5d6fbbddc194b2eb7214151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:67:f7:1a:49:56:be:9c:cb:49:a5:f1:80:
e2:77:ff:5f:2b:af:cf:db:51:6f:d6:9b:a5:9c:c4:
a7:41:35:1f:1b:e8:53:e5:99:5d:49:9c:45:8c:30:
6a:4d:fe:89:bd:86:77:11:65:94:c4:c9:2d:e8:07:
51:80:4c:8b:08:71:65:0d:71:21:51:e9:c7:53:5c:
ca:cf:a5:60:a1:d0:2e:8d:88:1c:0c:1e:67:34:24:
91:d4:50:e2:b5:71:b9:6a:80:71:1c:27:cc:43:1f:
b1:4c:68:30:41:b7:e7:0a:02:e0:23:1a:03:5a:eb:
f3:50:ab:ed:06:d3:a6:e6:c3:b7:46:85:03:31:3f:
52:eb:04:ee:c0:94:d0:b6:b8:fc:b1:ce:8f:03:7d:
e7:2b:95:ff:27:12:b2:a3:01:0d:82:97:1b:bd:fa:
88:f0:04:22:a3:7b:47:e7:0e:1a:a7:88:97:7d:8f:
36:30:06:a2:ec:74:33:ca:f3:35:e1:df:b7:de:e2:
6c:d7:b8:df:87:e2:73:a0:e7:e4:62:a8:54:f8:15:
d6:d5:a5:fe:1c:10:81:f2:46:d2:43:6c:62:b8:6d:
03:54:22:e1:10:07:65:58:a9:ae:1e:26:57:51:53:
88:61:4e:cd:14:a5:34:bd:13:92:df:ad:9a:cd:2c:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:5C:5E:85:44:0E:C3:D5:D6:FB:BD:DC:19:4B:2E:B7:21:41:51
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:cc:59:9e:31:19:ea:d5:94:a8:e5:db:12:4e:5e:5c:23:
69:51:f1:12:82:33:72:5e:e8:bc:ed:13:c6:2a:78:9f:01:3f:
55:5e:00:07:0f:78:81:01:4c:8a:8c:dd:89:ba:ff:8c:a5:d1:
54:c8:6a:24:e5:38:9f:9a:1e:84:e5:5f:d3:47:28:0c:9a:d4:
6f:35:1e:38:5e:6f:98:82:2d:16:ab:8c:99:ba:34:02:96:13:
de:f8:be:f4:7a:04:2b:1e:a7:62:48:89:77:11:3c:8f:54:42:
8f:0e:38:d0:61:ee:b5:bf:26:d6:0b:b1:3c:38:48:a8:7e:73:
d0:b8:30:a6:14:d9:d0:bd:ed:6b:11:15:e5:c4:70:9d:af:87:
9d:b9:33:c0:48:b7:a8:a8:e6:1c:d3:e1:9c:a9:3f:17:a7:04:
a7:1b:4d:7a:4d:a5:44:02:5a:e4:2c:c2:5d:e7:e2:8b:95:5d:
b6:4d:d3:29:27:ad:06:39:d1:44:a9:78:bc:0d:2a:54:04:e1:
7b:4f:c0:97:6b:e6:f4:0c:16:59:69:0b:4a:68:47:b6:9a:10:
b7:36:a5:47:a7:14:98:96:45:8d:da:e0:3d:25:f8:49:66:cb:
be:8c:f6:8b:14:8e:1a:1f:55:f3:48:02:e1:bd:bb:de:c8:09:
84:ef:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:24 2025 by rpki-client