Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: v6EY2gEWmRsH4EmirI8klL0oLwaa18AxNafBDzR2GDw=
Subject key identifier: F3:F5:44:5A:52:13:A9:6D:E0:10:C9:C0:C6:5D:88:8F:B0:9D:7A:27
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019A4EF512C29AB7E05A8A4E32F038AB5F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 10D2
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: xLzdh6ktyITjmsYIA9HmAYmT9Ly5xx7a/2YVQK/vB5k=)
2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:12:c2:9a:b7:e0:5a:8a:4e:32:f0:38:ab:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=f3f5445a5213a96de010c9c0c65d888fb09d7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:2c:8b:58:c3:82:31:4f:8d:f5:c8:b2:07:
b5:f3:a5:e8:3d:bd:2e:aa:38:6d:e0:1c:16:6e:62:
3e:d6:d6:b3:2a:8d:24:48:8a:63:4f:30:3b:21:ad:
5e:4f:5b:aa:43:fb:85:53:02:6c:ca:7f:52:fa:01:
b9:94:0e:9a:d1:20:35:5a:af:d0:c3:fa:29:23:95:
6a:36:b6:ce:33:19:73:47:6f:ae:d7:fb:78:9e:6f:
4c:7b:31:f2:3c:22:16:64:ab:fa:60:c0:4d:d2:26:
a0:1f:51:70:cc:ff:bd:93:13:36:36:9d:69:a1:cc:
b3:4b:b8:d8:41:7b:ac:4d:d5:1a:c7:ed:55:a4:3f:
3a:cd:e7:f4:aa:df:a5:3e:94:f8:69:6c:23:85:06:
f7:b8:64:9d:57:c2:4e:77:68:7d:81:90:e6:a2:cd:
bf:f3:71:e9:a5:60:c2:84:ac:5d:b3:93:79:8b:03:
c4:76:d5:fe:c7:f4:7b:8f:a4:fd:2b:a1:1b:4c:e8:
3e:bd:cc:63:d5:e0:f3:c8:63:72:48:71:8f:be:96:
48:77:78:fa:81:7b:3a:37:10:a2:86:5a:a1:1a:f1:
62:1e:0f:10:ec:cf:a1:6e:dc:41:5c:af:68:d5:40:
a5:b6:90:f9:b1:2f:87:d0:d8:71:03:82:bb:3f:47:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F5:44:5A:52:13:A9:6D:E0:10:C9:C0:C6:5D:88:8F:B0:9D:7A:27
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:88:3a:b7:78:14:dd:07:76:8a:2a:47:2a:e3:b5:94:20:37:
ee:04:92:d4:9a:98:89:15:ae:a8:76:0c:56:68:b7:69:fe:38:
3d:a8:ce:cc:cc:27:51:e5:9e:aa:44:dd:e5:18:1d:8c:3a:6c:
66:6e:b9:5a:eb:ee:89:65:22:8a:ff:da:20:f2:fe:0d:c9:e0:
d9:48:71:aa:bb:47:4c:4a:48:78:a9:4c:b4:59:a8:42:da:05:
ae:2f:ef:13:ce:3a:bc:2a:01:0f:6a:f4:d8:dd:44:95:61:02:
3f:41:ae:01:38:65:4e:ba:73:80:38:ff:f3:59:ad:d5:f5:3b:
89:cf:3d:4c:49:ff:fa:c5:f7:c7:86:dc:87:39:09:db:a3:c2:
dd:be:fb:7a:ef:00:39:65:2d:14:42:dd:ba:d2:eb:b0:a5:78:
75:1b:9b:38:59:3c:6f:88:d2:9c:d1:59:f3:78:81:22:24:57:
3c:ad:eb:a6:59:88:ab:a5:dd:94:cf:58:be:78:c4:b9:79:ca:
01:82:04:39:10:a5:af:44:1a:d3:bd:06:85:95:48:44:2e:a5:
11:33:67:81:5d:71:f3:9a:23:2c:a8:d8:12:13:99:38:e5:5e:
8e:b3:e4:de:e0:37:56:24:11:f1:07:e2:62:9f:81:08:ac:99:
9c:b8:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:56:47 2025 by rpki-client