Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: ViwPSlT5/qY3WXpQneUY4Z7r35TcT0lGwzJbigKV9pI=
Subject key identifier: F0:9A:78:C2:39:A6:4A:FA:A8:16:67:80:4E:53:03:69:C1:DC:EA:5C
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 019A4F2B0DBDF70016A5360F7B37ED921007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 0355
Signing time: Tue 04 Nov 2025 14:00:12 +0000
Manifest this update: Tue 04 Nov 2025 14:00:12 +0000
Manifest next update: Wed 05 Nov 2025 14:00:12 +0000
Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: 5KyNIBYxZf6xQIVn7jSd0sYk2s/xR5J0CrVTBx/TbMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0d:bd:f7:00:16:a5:36:0f:7b:37:ed:92:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Nov 4 14:00:12 2025 GMT
Not After : Nov 5 14:00:12 2025 GMT
Subject: CN=f09a78c239a64afaa81667804e530369c1dcea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:7f:c0:bf:f6:1d:55:b2:8b:9d:78:cc:a0:
63:cb:cd:0f:a1:a3:12:68:d8:39:a6:71:cf:79:2d:
c4:12:5b:03:ac:87:4c:73:d4:65:94:1f:91:90:2b:
a7:b6:0e:e4:cb:d0:fd:5c:20:45:d4:76:2c:4a:f4:
5d:da:7e:d5:73:77:66:68:7e:f8:20:15:ee:1f:4b:
34:db:27:2d:15:dd:52:8a:51:ca:34:16:cb:b2:85:
28:e8:01:84:a3:34:2e:5b:ae:18:a5:ab:12:b7:96:
93:03:9e:03:a8:cf:fb:09:78:7f:fa:51:2a:73:dd:
63:00:ad:f5:8b:e3:76:72:e2:85:c1:9a:e7:1b:27:
e3:80:d5:01:3e:9e:e7:36:62:27:67:e0:0c:0c:28:
8f:42:02:3c:7b:f6:80:3d:4e:37:86:d6:59:f1:4a:
b8:95:d6:e2:e7:5a:56:8c:07:ca:b9:ad:e8:ef:3a:
03:54:da:a3:32:2b:d6:7c:22:16:b4:96:34:24:87:
84:9a:a4:d3:98:9b:08:19:58:c2:ba:85:34:11:c0:
14:a6:a3:a1:5c:97:15:ea:80:5b:45:f9:e1:5d:fb:
33:aa:10:8f:85:58:05:82:42:a8:85:2e:9c:da:ce:
1b:90:e2:5f:37:2d:5a:13:a5:f4:6f:56:f8:8b:d5:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:78:C2:39:A6:4A:FA:A8:16:67:80:4E:53:03:69:C1:DC:EA:5C
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:5a:91:c1:3d:de:96:ad:53:ae:76:63:3c:63:8d:e4:35:
9a:bf:6b:66:f4:71:cb:af:43:d4:18:8d:2e:1a:26:a7:9a:87:
f6:02:7f:35:9c:a7:ca:ec:bf:07:00:6b:fa:8b:42:7a:fe:c3:
ca:04:dd:f6:9b:61:bf:2b:c8:ba:f3:a2:37:0a:00:9e:6a:ee:
31:22:9a:21:70:ec:d6:a0:11:23:72:57:35:8b:69:bb:87:f2:
fb:fb:5d:ce:31:7b:ff:6c:f6:88:28:c8:14:ad:01:cd:29:9e:
ee:cd:8e:fb:36:db:08:71:bd:05:6e:94:3a:6a:59:bf:1f:c0:
20:bb:2a:1c:ea:ae:de:fc:25:4d:60:82:58:1d:ad:ba:be:96:
d7:a8:87:09:ed:74:61:be:36:0d:83:70:8f:6d:e2:55:3b:ad:
47:30:81:13:72:b3:d5:c0:17:51:83:53:d7:b2:e9:a4:5d:c5:
89:3b:64:03:43:e7:1c:d8:ed:7e:49:27:63:e7:91:62:e4:cc:
c0:6a:db:ca:f9:21:75:a6:7e:b7:e0:37:9d:10:13:22:4e:2d:
5e:fa:74:f1:d8:d8:6b:bb:56:81:cc:50:61:85:2b:5c:a3:87:
5e:8b:d9:17:df:51:71:25:e1:97:c0:26:bd:c2:32:93:14:81:
19:86:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:32:20 2025 by rpki-client