Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: 16y7VpGeDI2zd1f5N/H1f4MKRbHvJOItobwH9MmknRI=
Subject key identifier: DA:8D:92:4E:E2:DA:12:1C:BB:B8:82:9A:36:CA:FA:83:65:BE:58:E9
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019A4D73C2710C604011E4CCEE1FD54EBB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 104B
Signing time: Tue 04 Nov 2025 06:00:23 +0000
Manifest this update: Tue 04 Nov 2025 06:00:23 +0000
Manifest next update: Wed 05 Nov 2025 06:00:23 +0000
Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: A57bbfjhJpuz90dpjuXjyZGAH3eQCdKkjIaSG9n72vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c2:71:0c:60:40:11:e4:cc:ee:1f:d5:4e:bb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Nov 4 06:00:23 2025 GMT
Not After : Nov 5 06:00:23 2025 GMT
Subject: CN=da8d924ee2da121cbbb8829a36cafa8365be58e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:2e:36:a6:d8:a4:14:62:9b:63:7a:ec:98:
8d:cf:41:2c:9e:be:23:b5:aa:95:f9:96:66:76:74:
62:b4:0a:6c:6f:c3:77:33:f4:5a:35:f1:82:7c:35:
86:5f:36:2a:d8:bf:fe:30:44:ab:e4:0a:e6:62:c8:
30:71:b3:91:87:12:b6:10:91:b8:0a:e6:db:41:7d:
f9:6e:d2:c7:5b:ce:a7:41:c1:92:e6:18:fc:8f:43:
2a:c6:9e:9d:a7:5b:24:ec:43:2c:fb:59:ef:ac:b4:
e5:54:72:8c:85:35:b9:ad:24:46:1b:af:95:16:04:
49:bf:b7:0a:be:1b:6d:1d:c3:74:10:d0:e4:71:c7:
a5:ab:24:2c:bd:04:cc:d6:56:bd:34:16:e1:7b:f7:
4b:64:ee:c7:20:f1:63:0e:4d:e2:5f:6e:d3:2e:35:
11:8e:7d:e4:b6:42:bd:0e:34:0e:08:5e:8b:5d:36:
21:c8:de:59:00:da:0b:68:1e:aa:90:6e:96:fe:f9:
ca:07:74:b0:33:9e:95:36:25:a7:69:28:29:09:9c:
80:c3:f0:b0:6b:29:21:1b:5c:1f:2f:af:77:6a:1d:
02:dd:e1:20:45:ad:35:43:e4:36:2c:2f:5e:c0:ca:
d7:83:48:cf:36:99:c0:e3:55:1f:16:26:32:93:10:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8D:92:4E:E2:DA:12:1C:BB:B8:82:9A:36:CA:FA:83:65:BE:58:E9
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3f:20:17:42:e0:f4:cf:eb:c7:45:05:3e:48:13:59:23:74:
84:d1:df:56:db:6b:67:63:dd:d2:b7:fb:c3:df:e0:40:41:a9:
8f:0a:9c:ff:4f:7f:de:44:f1:b2:fe:55:cd:e3:b4:9e:3b:d3:
78:a3:d8:ff:7d:b4:80:72:38:6b:cd:aa:b7:7b:f1:5f:86:5c:
4a:19:e7:86:2c:75:c5:40:8c:6f:8d:cb:d6:a5:7d:d8:a0:15:
db:6b:97:93:e2:1b:8c:00:71:85:69:a4:a2:57:d1:37:dd:b7:
32:60:60:9d:72:ca:77:b9:25:99:d8:5a:c3:67:9d:6e:0a:b1:
d9:08:47:e8:c6:c6:cd:1a:e2:f3:8c:6e:c5:73:81:08:c0:1d:
e9:96:28:d6:76:ae:4a:37:76:43:a8:72:4c:64:9f:bd:af:b0:
0b:42:bf:75:52:ca:33:95:af:76:4c:d5:8b:15:a4:9c:3d:87:
7c:6c:1e:c8:58:36:94:03:53:b1:52:03:19:74:fd:aa:3b:98:
6f:e3:64:4c:e9:a2:b6:38:07:d7:75:b1:47:49:23:66:d8:99:
36:63:df:b8:8b:6f:d7:d4:b6:7c:74:8f:f3:4c:1a:71:bd:6a:
f0:4e:f8:1f:0d:60:e7:07:a9:cd:d2:d8:d8:a0:cc:bb:70:a6:
17:c9:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:21 2025 by rpki-client