Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File: 19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier: EuPYAlHqyMJPn0wdw/Tumv2votpP1Q7tGcMigg8TFk4=
Subject key identifier: 45:03:9D:42:08:5D:C1:48:48:9E:50:B1:7A:41:D2:10:76:9E:C1:C1
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019A4F624364A55C67060FEC15F0B0C84C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number: 084A
Signing time: Tue 04 Nov 2025 15:00:31 +0000
Manifest this update: Tue 04 Nov 2025 15:00:31 +0000
Manifest next update: Wed 05 Nov 2025 15:00:31 +0000
Files and hashes: 1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: TLGVuPcUiTaNBV7XIWvVBHRIDA+pe2wNJsPXDjCASYE=)
2: 8iF0TI75PKxA6luqVxe6AcPUdIw.roa (hash: zuZGyASOIUwUAnK/KJcy85MR7JAwFUMnhbd2U54FQPI=)
3: itbVtWP59mCPTrHaDnFdRJMUVew.roa (hash: e0BQXURiCQ3TdcGRBASSre11rKXIoznsycIbHY0QbKM=)
4: ySRDlwFvtMEyAEchCR7IpwI1hOE.roa (hash: Se2FW8a2atFU/DlmDTltY5HULLymwYj0jaibNxe54YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:43:64:a5:5c:67:06:0f:ec:15:f0:b0:c8:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Nov 4 15:00:31 2025 GMT
Not After : Nov 5 15:00:31 2025 GMT
Subject: CN=45039d42085dc148489e50b17a41d210769ec1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:bb:50:27:ef:a7:fd:20:cf:8b:10:4a:88:
48:ff:22:3c:82:5a:9e:4f:6b:72:c3:6e:5d:42:0d:
78:df:c2:d2:d3:b6:15:0f:31:0e:8a:95:fc:9a:90:
51:5a:04:54:7f:e0:1a:21:89:05:f4:49:0c:b6:9e:
96:82:19:61:d1:f6:11:ba:41:17:ff:e9:9c:1d:1e:
c0:d2:1b:79:b8:2d:57:dd:58:4a:08:c5:4c:6f:37:
3e:98:65:10:92:ba:b8:5f:57:dc:8a:76:e6:d6:5e:
44:82:6d:86:99:c6:98:76:a4:e6:2f:e5:4f:f5:c2:
98:23:7e:1c:25:ba:a3:63:50:97:3a:bb:b7:04:68:
23:d1:79:11:a2:09:71:60:fb:05:c0:72:48:27:9d:
f8:a5:58:1c:40:8c:8e:ed:7c:2a:4a:09:ee:7e:37:
fd:86:49:e3:f1:d7:6b:15:88:d6:95:69:6c:bb:3f:
b6:0d:f2:54:cc:39:12:3e:d3:f8:f2:a4:e3:00:b6:
f2:68:aa:08:d0:a9:58:1a:e6:9b:ed:37:b4:d2:28:
e1:69:6b:11:f8:aa:1b:8b:0f:9a:97:2b:70:8d:e7:
cf:d0:64:be:a9:03:56:44:c0:f6:a1:39:c0:f9:4a:
5f:6b:6f:20:37:54:61:4d:91:56:34:96:fd:d8:c0:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:9D:42:08:5D:C1:48:48:9E:50:B1:7A:41:D2:10:76:9E:C1:C1
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:bb:cd:cc:08:06:54:9e:44:f5:f3:a0:68:fc:0d:34:53:
cb:cb:7d:c5:9a:e9:28:5d:a3:a4:31:bd:99:ee:b4:71:80:e9:
5f:da:3e:1b:9b:e6:91:33:47:a5:28:e7:1e:c8:4e:49:b0:42:
c6:35:6f:e8:7d:dd:54:c4:c1:00:79:59:c5:e2:88:d0:07:4f:
c5:22:8f:40:12:c9:2a:4e:cd:53:74:33:61:d1:9d:08:95:fb:
42:de:98:f5:65:bf:3d:aa:94:20:45:c2:65:24:81:74:eb:b6:
dd:e5:52:40:ca:8d:1b:e7:7b:a4:b0:c1:5c:5a:6b:bf:77:27:
0e:d3:4b:c5:7d:88:53:15:0e:77:cd:10:e9:b4:f3:6c:03:2e:
c0:c5:43:5a:23:4e:11:6c:45:e3:b9:5a:2e:c9:69:b4:20:1d:
a4:f9:cc:af:c0:0f:43:22:59:61:f5:79:01:7a:5d:d0:a5:41:
59:9f:40:92:ec:e5:2a:f2:d9:e5:c8:2a:12:13:6d:86:b2:2d:
63:6e:22:9a:b9:6f:d8:de:8a:ab:04:68:70:db:26:23:63:fe:
86:79:24:29:ce:34:81:bc:19:26:38:c8:45:fa:60:08:92:37:
e9:37:97:cc:a9:fd:0f:b1:18:1f:61:7e:cb:29:7a:ce:7c:95:
25:97:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:28:46 2025 by rpki-client