Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: P+LK7FNE6CZZE5xmHf3K9PwSzOYUE9wB1ACGWatATms=
Subject key identifier: 81:3D:F1:45:13:C2:1D:29:05:8E:43:61:81:BA:F8:70:BA:D5:71:8C
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019A53E40F63CFE815329949212A8CCB45E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 4E
Signing time: Wed 05 Nov 2025 12:00:46 +0000
Manifest this update: Wed 05 Nov 2025 12:00:46 +0000
Manifest next update: Thu 06 Nov 2025 12:00:46 +0000
Files and hashes: 1: Ifp7fQ7mKS2UADFnL-dEcvfRDTE.roa (hash: zAV7cpAaiTXY8jJp2Gcf8CxnC05s7OAa7rmlAr6seaI=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: nKaS2QWVonWE+W4lr8oKRZUGIT4LWF21ZnH5hi/F0ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:0f:63:cf:e8:15:32:99:49:21:2a:8c:cb:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Nov 5 12:00:46 2025 GMT
Not After : Nov 6 12:00:46 2025 GMT
Subject: CN=813df14513c21d29058e436181baf870bad5718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:e3:72:ed:70:91:3f:2b:4c:5f:ef:e7:77:
91:8c:1f:35:e0:37:96:b1:06:f6:61:d2:c6:20:b2:
26:b7:07:da:41:d0:99:e2:ab:cf:d9:6c:c5:31:3b:
e9:bb:d7:4e:e2:b0:92:2a:09:f9:f4:92:22:0f:ae:
fe:70:09:62:89:85:8b:56:be:3b:28:2e:42:b9:83:
27:a9:1d:8e:b7:18:70:98:b6:93:4f:60:a4:26:71:
b8:37:a7:3e:b3:5a:8e:8a:7e:11:1e:41:96:06:96:
4f:69:15:25:43:17:67:28:bd:95:21:d4:35:ba:ab:
73:d0:df:da:b0:51:f9:f8:18:80:cd:42:bc:42:d0:
22:c5:22:e0:b7:57:6e:18:5c:5b:1c:0d:b6:ea:6b:
8d:fd:3e:1e:42:de:cb:40:df:47:44:21:94:20:d2:
cb:ab:c5:20:ff:ef:fe:36:c3:53:7c:5f:78:ff:e8:
58:01:78:ff:f5:5d:39:b5:6d:fd:87:8b:a5:40:8a:
f7:2e:d3:77:70:46:7e:18:a2:9a:26:4c:aa:1e:e2:
41:34:11:08:2d:95:fe:39:9c:98:8d:1d:91:0d:79:
45:34:b8:35:14:2d:ec:60:ec:b7:18:8b:87:08:5e:
c3:f7:b5:c4:5d:48:83:69:92:f6:19:c9:58:83:81:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:F1:45:13:C2:1D:29:05:8E:43:61:81:BA:F8:70:BA:D5:71:8C
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:7f:9d:ff:08:b9:ec:78:c8:94:8c:65:39:66:74:ae:8f:
a4:02:30:68:52:11:5e:c0:82:9e:85:60:17:e0:ed:91:7a:b3:
30:70:f6:9b:5b:ab:53:db:85:4c:ea:b4:cb:16:83:9c:2e:90:
a2:5f:55:fe:48:f1:3c:6b:66:cc:1d:5e:33:e6:f8:2b:78:61:
ee:84:42:84:bb:5b:80:62:05:d8:aa:1f:bc:71:bf:a2:6d:50:
81:c6:d1:d8:12:d0:f2:5c:84:b1:63:ba:fd:ba:4b:cf:0f:23:
46:38:e0:40:0d:eb:c3:c5:d3:62:47:cc:e3:c6:b5:9b:28:b2:
75:eb:e9:80:bd:5e:6c:ad:9f:17:75:1d:69:2c:63:b1:f3:09:
a9:91:f6:5c:f4:b5:2f:f7:e3:07:c5:60:f2:50:5a:f4:e3:17:
8e:c1:ce:ff:48:db:da:72:dc:95:1a:9a:af:67:92:2d:17:81:
da:36:f5:aa:01:47:84:6a:e6:45:18:05:c4:a4:72:e5:56:bf:
49:5b:07:15:ad:53:9a:23:12:f9:c0:66:b4:79:70:9e:6a:d4:
5e:4a:6e:a9:1b:78:fc:e5:9a:1c:42:da:b1:f5:eb:91:04:b9:
55:7f:b1:33:ea:0a:66:f0:da:fc:c7:ae:bd:52:dc:f6:9f:c7:
7e:c0:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:42 2025 by rpki-client