Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json)
Hash identifier: DHA/0yx564QqEqgx3a3xwGU6DpALWYsV9P/uIb5LdIE=
Subject key identifier: 11:2A:B2:57:2D:0B:4F:CF:54:E5:5E:C7:CE:6A:C4:83:FC:48:F9:C9
Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477
Certificate serial: 019A4DAA63604D75614F63A3E7417B7584F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 07:00:03 +0000
Manifest this update: Tue 04 Nov 2025 07:00:03 +0000
Manifest next update: Wed 05 Nov 2025 07:00:03 +0000
Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=)
2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: f3wgv/ZagK0pWRKGr9BluSv31sg6ZD1uHnqH1m0PgD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:63:60:4d:75:61:4f:63:a3:e7:41:7b:75:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477
Validity
Not Before: Nov 4 07:00:03 2025 GMT
Not After : Nov 5 07:00:03 2025 GMT
Subject: CN=112ab2572d0b4fcf54e55ec7ce6ac483fc48f9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:1c:47:26:f4:8e:ab:8d:57:e4:67:92:7d:
b3:a6:f1:86:58:42:26:1d:e7:bb:39:85:90:71:cc:
a7:16:7a:bb:d2:d5:80:2f:a8:ff:71:3d:c9:51:fb:
f8:26:d2:54:4e:3b:8a:7a:83:30:73:43:d0:c7:03:
62:ad:09:47:59:54:c0:e8:87:18:e6:1e:90:39:31:
6c:49:6f:c9:4a:9f:46:66:e1:d3:f1:0f:e2:b7:ac:
80:96:24:41:10:fb:66:5f:01:e6:6a:ab:82:4b:32:
76:5b:44:7d:22:0f:ea:9f:3a:2c:d2:31:94:ba:3b:
69:cd:7e:fe:46:54:1f:cb:72:a0:99:48:84:ad:c5:
e8:f4:0f:71:14:5b:6b:04:a8:23:f6:37:15:21:79:
e0:8f:a6:3e:07:bd:03:b0:4b:76:7e:a9:ed:19:f2:
13:c8:a8:4b:d2:24:78:24:2f:9d:81:6e:60:a7:7b:
8a:01:04:71:92:53:5e:50:9a:83:66:9c:ce:82:9d:
56:1d:a6:d1:26:fc:5f:fb:41:4d:c7:02:eb:ab:1a:
1e:68:4d:9f:5b:ab:25:12:0f:02:0d:11:1e:16:c9:
32:e6:ac:f8:61:ce:7c:b5:07:c8:9c:75:40:d1:8c:
8a:be:63:e3:a4:7a:b8:e8:6a:14:64:77:21:14:77:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:B2:57:2D:0B:4F:CF:54:E5:5E:C7:CE:6A:C4:83:FC:48:F9:C9
X509v3 Authority Key Identifier:
keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:4a:a1:39:7f:22:af:f7:80:67:15:2c:70:21:4c:ff:aa:
d4:41:c6:56:d3:5c:41:dd:c6:cc:4a:94:19:39:8e:bd:5d:5a:
3b:71:f1:82:29:0a:3d:d6:a5:9d:83:ff:9c:50:38:3b:2b:c6:
8a:2f:64:07:91:25:f5:42:69:0a:e9:ad:66:68:93:28:cd:57:
12:88:c9:48:ec:9e:77:35:4c:48:8a:96:f0:13:f5:44:e2:f8:
f0:e1:9e:e3:b6:da:b8:3a:43:f2:7f:c6:33:ab:f7:24:4f:dd:
db:db:41:de:a3:4a:7b:82:cf:a7:42:1b:d4:d3:ff:3f:18:93:
74:88:6a:61:ee:65:56:67:21:d3:42:2e:38:e0:67:c9:97:e3:
cd:e4:a8:28:da:c5:2c:97:4e:00:f0:c0:99:07:b3:5b:95:7c:
49:4e:69:4e:1f:7e:28:7a:d7:3a:75:2f:05:e4:bf:ce:07:7a:
2a:49:b3:de:07:96:a6:69:55:0d:47:93:2e:3e:b9:f9:37:8c:
43:1d:78:0d:1c:2c:53:2d:79:bf:5e:3f:30:97:02:16:79:5e:
3a:4c:a1:2d:e6:fe:55:5c:21:ce:7e:94:c6:37:a2:e4:3c:c4:
42:98:b6:5d:66:7c:3d:e9:d3:a1:0b:4b:ef:7e:75:ac:df:1f:
09:31:8f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:01 2025 by rpki-client