Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: yQE81C3syE9IFNjhj0cYNvwXDP6jdnGGITrKQC/PBWg=
Subject key identifier: A1:6C:20:BA:E7:24:60:EB:13:07:98:32:4F:53:81:03:2B:BD:23:33
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 019A4E867C7C0947C2F1A375E0DBA01A0435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 1749
Signing time: Tue 04 Nov 2025 11:00:27 +0000
Manifest this update: Tue 04 Nov 2025 11:00:27 +0000
Manifest next update: Wed 05 Nov 2025 11:00:27 +0000
Files and hashes: 1: 6ytibQXjOjv-ZANwibgbWAzZG2U.roa (hash: Y/Z/9OvD6QNjfuwrTmUdgOamFL52z6ksqnz9FZTa6JU=)
2: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: bEdSIjWsdFxCNVJSR4FUuDxcXJhSYXgD7D8fKo2OfPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7c:7c:09:47:c2:f1:a3:75:e0:db:a0:1a:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Nov 4 11:00:27 2025 GMT
Not After : Nov 5 11:00:27 2025 GMT
Subject: CN=a16c20bae72460eb130798324f5381032bbd2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:5c:a5:7e:1f:e9:ab:25:a5:5d:fe:83:4e:
69:aa:a8:8f:83:6b:0e:2b:f5:ec:eb:e2:a5:ef:c5:
83:62:23:51:da:22:c8:c3:79:67:ab:d5:d8:10:49:
d2:86:9e:e4:21:00:17:92:8c:92:fe:24:cc:35:08:
4a:45:28:b0:df:43:67:0f:76:9f:12:90:81:57:37:
4e:6b:dd:50:12:5d:bb:65:01:df:73:93:76:58:71:
42:26:50:b3:b0:e8:7e:2c:e5:53:c1:a8:dd:cd:af:
e7:dd:4e:aa:fb:7f:c3:f9:9c:7a:8d:99:0d:75:50:
60:b5:8b:33:c2:fa:b0:b0:c1:27:01:56:a7:fd:40:
2c:9e:60:9b:26:01:e0:9f:f3:1d:21:cd:16:91:85:
ef:02:8c:23:df:57:7c:88:62:f8:1a:9a:33:59:8a:
36:4d:c6:c1:b9:37:14:23:11:46:9f:d7:a8:f1:46:
82:6b:34:95:de:91:c4:0e:b3:eb:a3:2a:06:28:a2:
56:10:58:99:a6:36:49:2f:08:6c:81:5a:9c:8f:c6:
dc:86:d5:de:26:58:18:43:c5:06:c6:f1:74:5c:9e:
ba:1a:c0:ad:b5:6a:84:2b:a4:c7:4d:9f:32:1d:53:
26:af:fd:64:0f:dc:2e:02:cd:f7:48:50:36:4f:90:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:20:BA:E7:24:60:EB:13:07:98:32:4F:53:81:03:2B:BD:23:33
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:3c:6f:57:a8:c8:35:fd:6f:5b:64:77:3d:92:10:1c:3c:
2d:93:46:19:ca:e1:cc:53:0e:0b:6b:20:8b:81:ea:6b:ba:21:
7b:fb:1f:c4:f7:ec:c2:46:08:f0:93:56:ac:60:23:38:8d:bf:
8e:59:b3:3b:56:a7:55:03:aa:32:94:81:9b:c0:46:3a:fd:49:
1d:4d:ac:33:aa:77:f2:ee:fe:72:53:43:d9:32:d1:6d:96:9d:
c4:e3:39:d1:0a:1d:c8:b4:86:be:1f:87:bb:84:2a:15:5d:a9:
6f:c0:47:94:ef:fa:0b:c4:e7:d6:71:54:1b:ed:bc:91:e9:c5:
8e:ce:8b:bc:d4:3c:19:2b:98:b1:1c:53:b4:7f:8e:1d:2a:ed:
0d:ba:99:fa:f9:52:1a:27:ce:be:e7:24:4b:92:23:13:ac:1e:
14:d4:7c:40:e8:e0:41:24:3b:c3:56:38:c8:f0:c9:e4:ef:4b:
32:e4:af:d1:2c:48:51:9c:bf:4b:ba:6f:af:1d:67:2d:9f:ad:
c4:60:e4:75:f2:72:80:72:4d:9d:49:b6:22:05:59:98:d1:76:
6b:d2:de:5e:c4:bc:20:7f:c4:84:4c:35:83:c5:1d:62:4f:f5:
6c:7d:27:6a:80:6b:fc:58:eb:15:e8:35:48:e5:97:d1:d0:4b:
04:eb:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:16 2025 by rpki-client