Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: SHbOaRLHBl3VYuOtg4EKZcEiPdInDFi1Xyeinm3i49o=
Subject key identifier: A1:73:CC:13:0C:36:82:28:A2:FA:19:E1:1D:4A:66:97:F0:DF:29:B3
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 019A54BFC47E3835DF5B7C334927BB7E4E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0A5C
Signing time: Wed 05 Nov 2025 16:00:44 +0000
Manifest this update: Wed 05 Nov 2025 16:00:44 +0000
Manifest next update: Thu 06 Nov 2025 16:00:44 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: IHIUg0QPEtiYvsZh1PvP7i5w15DP6fFaTN0z14yzQnk=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:c4:7e:38:35:df:5b:7c:33:49:27:bb:7e:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Nov 5 16:00:44 2025 GMT
Not After : Nov 6 16:00:44 2025 GMT
Subject: CN=a173cc130c368228a2fa19e11d4a6697f0df29b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:70:50:e5:ba:c0:83:0c:15:75:a5:4c:c2:
b7:22:b9:51:6d:39:92:5c:87:67:af:f2:3b:cb:28:
54:77:20:14:e0:d7:f6:86:00:a8:01:7b:cc:5a:8c:
df:68:d4:59:07:77:6d:ee:45:bb:34:ed:8e:1e:65:
ac:94:59:17:67:7f:7b:7e:49:93:88:53:60:ac:88:
9e:f9:a2:fc:6c:8b:57:f0:de:83:c5:f6:62:bc:39:
df:cb:7f:c7:23:c6:6b:a5:5b:d4:ad:7f:e6:00:b2:
e8:f0:62:42:ab:0b:a5:24:8a:46:96:de:ba:33:fb:
e6:ad:26:73:94:3c:d4:af:25:e8:f1:9c:5c:f0:80:
1f:53:c3:15:f0:97:8c:a1:d8:78:a1:da:2f:bf:a8:
6b:65:58:1d:cb:a9:c1:81:a8:11:1c:84:1a:cb:40:
53:2f:f2:77:4b:b6:9c:75:c4:cc:e9:7d:47:1c:d5:
c2:5e:62:27:5d:85:44:6b:c2:0a:04:c3:c7:7c:05:
a9:19:e2:2f:a6:46:34:01:b6:d1:36:4f:a4:70:97:
fe:2d:fa:72:de:c3:b2:94:14:2f:2d:5d:6b:91:c7:
e6:7a:ce:47:8f:c2:d4:68:67:1f:68:9c:03:15:67:
39:a4:d1:2b:f7:17:52:14:06:4f:c1:21:59:a8:1a:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:CC:13:0C:36:82:28:A2:FA:19:E1:1D:4A:66:97:F0:DF:29:B3
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:be:f7:8d:32:7b:36:3e:b5:4c:0b:30:0b:e6:8d:f7:bc:cb:
bf:85:90:02:1b:50:c1:68:31:e5:c2:a0:48:91:57:9e:0f:e3:
f7:ea:59:7a:62:8f:68:ae:da:29:35:a8:46:70:7e:e8:9a:d0:
2f:d4:a9:3e:df:5a:da:c5:60:6e:f0:7c:d2:45:c7:f3:af:b5:
8a:b5:12:60:f3:b8:8f:c0:1b:24:68:e3:e7:01:78:58:6c:5c:
0b:73:cd:0f:7f:3c:1c:1c:8e:41:4a:03:2d:9e:40:a0:5b:72:
59:34:ce:15:00:cc:b0:f7:ab:5b:6b:3f:9a:ad:f8:5c:52:fc:
b4:50:bf:75:3d:20:fc:e2:d9:68:19:74:a3:37:1d:32:ea:92:
7f:58:25:05:7c:1f:85:51:9f:2e:99:ce:e1:72:51:fc:ac:c5:
ce:97:44:70:79:65:04:05:42:6e:13:0d:ae:1d:39:dd:01:5d:
a9:76:84:80:6c:4b:04:1c:cd:b8:00:21:3a:b7:a2:62:5d:29:
42:37:0b:cd:76:30:4e:e5:f4:23:28:90:77:fb:5c:ec:bd:47:
20:70:eb:d6:f3:8b:3d:a8:5f:8b:c1:aa:1b:10:b8:ac:18:17:
a0:fe:93:34:21:ea:c2:ec:9a:b7:a0:66:fb:70:68:52:2b:83:
b8:e1:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:01 2025 by rpki-client