Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: B50cXq/YnrMx61bmWKETARRZSKQYe10G1kdLCRQD6ew=
Subject key identifier: 4D:AA:C0:D7:11:5B:7A:27:C9:A3:7C:58:63:4A:59:D5:45:01:1C:70
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019A4EF563DFC65FADE175BAB956CCFF339E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0FA6
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: wOiFkmBOfB7zFYoa2Sx7svmucTcYOZH5AZQ2Sm3Qqd4=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:df:c6:5f:ad:e1:75:ba:b9:56:cc:ff:33:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=4daac0d7115b7a27c9a37c58634a59d545011c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:84:05:93:0c:2e:3a:59:1d:26:a3:8a:b5:
01:79:78:65:81:6c:45:a9:e5:29:e1:0c:92:48:2b:
9a:d8:18:6c:98:f6:84:1d:14:db:ab:a6:15:f2:44:
e9:ad:b4:d1:54:93:3c:c2:22:79:0e:40:10:5d:2c:
89:0e:ff:5f:c2:a4:90:17:b3:f4:54:d4:78:85:7b:
ff:f5:44:38:74:18:0f:ad:02:be:94:a6:bd:5c:47:
d6:de:7d:90:f7:20:1d:0a:40:06:c1:09:cb:d3:c4:
87:71:7d:03:0c:23:8c:4e:2b:ab:79:ff:a9:cf:72:
e1:a5:1e:f3:c9:3f:12:20:b9:85:be:ba:3a:25:3a:
e2:a6:09:a7:f4:69:6e:34:2a:75:9b:2f:75:8d:3b:
b8:7a:9b:69:da:f8:00:65:6a:8f:fe:35:4d:79:fa:
4f:04:1d:b5:a6:85:f7:4f:6a:37:2f:a9:30:81:48:
17:b8:3f:b6:fd:3b:5a:e5:db:1e:d0:04:77:be:1e:
fc:67:e1:f6:e6:f3:63:cd:0f:0e:5b:89:f4:77:bd:
84:5b:88:93:c0:76:5c:a1:c8:c6:27:b4:40:34:d6:
ca:5e:bf:56:63:e8:4b:db:35:c8:f3:7e:e4:c6:30:
14:17:13:40:58:53:ce:9f:fe:b5:5a:2c:a4:37:0e:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:C0:D7:11:5B:7A:27:C9:A3:7C:58:63:4A:59:D5:45:01:1C:70
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a9:56:bb:73:b5:7d:ce:4f:70:d9:0d:aa:7b:be:a4:cd:3b:
3d:64:0f:78:2e:b4:8f:ad:61:6b:a6:ff:b6:d0:a9:84:51:44:
06:74:25:5c:5b:7f:2a:40:6a:8c:69:c7:8b:ab:a0:1b:63:98:
26:ed:8c:b8:01:b4:fb:60:cf:cf:1f:e5:ff:ec:9b:ac:8b:e6:
9f:88:1b:b0:6a:b2:85:9a:2d:c3:38:33:66:1e:42:dd:70:ac:
e5:c9:9a:e9:a7:52:56:04:3c:58:44:8f:37:ca:82:06:3a:6d:
44:91:1f:0e:3f:dd:4d:79:06:f3:4d:fb:9f:49:93:49:0e:be:
d9:b0:da:61:28:a3:51:58:cd:6e:45:42:1c:19:a8:b2:5e:4f:
08:1f:b3:ca:c1:c8:c9:e2:60:5b:b2:53:9b:cb:7b:c1:06:ef:
70:73:ba:7f:67:4e:f8:bd:e1:7b:18:9f:aa:1c:da:d9:c3:93:
c2:38:1f:b6:2d:5a:14:db:1e:ec:37:a6:c4:7e:59:5c:d3:13:
fd:56:34:7e:60:8b:74:87:a7:61:5b:38:3a:06:ed:ad:1c:27:
cf:13:d9:4a:f5:95:13:96:7a:58:4e:db:72:b5:32:8f:7f:df:
f5:85:99:2c:8f:82:5e:d6:cf:30:0a:7c:5e:d2:b0:af:c5:f4:
73:45:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:55 2025 by rpki-client