Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
File: rUS-GO4-DSdHZwVV6GsACWXoE5s.mft (raw, json)
Hash identifier: EXGhyw9s14O++5lO9GxtVha6ry8dAWDqy6jMMY7jf0U=
Subject key identifier: FB:DE:8A:74:57:3E:78:B9:D9:5C:FD:52:01:D7:EC:61:14:8B:80:8B
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 019A4D0754BFD75559ABB78E83814C26A35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:57 +0000
Manifest this update: Tue 04 Nov 2025 04:01:57 +0000
Manifest next update: Wed 05 Nov 2025 04:01:57 +0000
Files and hashes: 1: kX62bL3xBVpkyK0FphmC5iQUK74.roa (hash: GEBZd8qkO5malJhFWg729yyTB3o+issIVlA3FLkcy9o=)
2: rUS-GO4-DSdHZwVV6GsACWXoE5s.crl (hash: F2dYQdtffHYYZ66RPHcS4RyOdEFJH3QFTNxvd2454Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:54:bf:d7:55:59:ab:b7:8e:83:81:4c:26:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Nov 4 04:01:57 2025 GMT
Not After : Nov 5 04:01:57 2025 GMT
Subject: CN=fbde8a74573e78b9d95cfd5201d7ec61148b808b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:e2:05:8d:3e:ea:5d:02:e4:26:7d:48:89:
45:0e:d8:b2:d9:e1:eb:0c:0a:0d:9c:77:d8:e4:e2:
16:07:0b:f8:00:1f:54:6c:df:48:42:48:81:ec:dd:
3f:2c:38:e2:6d:a9:3f:59:51:b0:77:bb:4c:de:17:
28:3b:0d:1d:f7:59:ba:a8:bd:a5:34:e8:76:bc:19:
de:81:06:97:8d:c4:fd:90:30:ed:6f:ab:4e:40:0c:
bb:50:9c:39:91:14:e5:d9:f8:6a:87:3e:22:26:9d:
3d:9f:2f:d3:c3:aa:b1:ae:58:a0:84:ab:06:25:49:
52:68:97:82:6e:a4:9b:be:18:90:44:2f:8a:66:3c:
d0:8e:93:20:56:95:d3:46:3f:24:71:8b:bc:16:76:
6f:ab:46:a0:cf:29:29:ad:49:02:f7:16:cf:06:08:
cc:bb:71:6e:87:64:c5:89:96:61:f0:db:a5:0f:9e:
b6:86:76:ff:fe:c2:69:5e:87:59:20:ef:16:e9:58:
6c:96:46:3e:fc:2a:b1:06:a4:48:44:d5:83:79:22:
0b:03:5f:54:36:d4:e1:ab:28:a3:99:e3:0e:28:83:
f5:19:66:10:e6:5e:15:e7:58:e8:cd:b5:80:10:c1:
73:0f:79:2f:0f:97:dc:f9:cd:23:a7:87:83:78:bc:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:8A:74:57:3E:78:B9:D9:5C:FD:52:01:D7:EC:61:14:8B:80:8B
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:db:9c:fe:21:97:3a:4b:5b:1c:e6:aa:b1:16:7c:81:07:db:
98:e4:87:a9:5f:6a:ff:1a:04:47:af:9a:96:a8:e1:71:f4:21:
5d:b4:d3:84:9e:a3:9b:88:85:b9:c0:86:2d:53:f1:dd:84:7c:
1b:f4:59:5e:36:c2:0e:43:86:9a:97:83:4a:ad:ff:2d:36:c8:
22:19:b1:64:01:d6:e9:a0:85:1f:95:8c:e9:8a:53:e3:71:65:
00:c3:3f:c4:d5:35:13:34:3e:9c:f3:c5:e9:57:70:50:08:cf:
5d:15:19:d6:4b:1b:3c:13:e7:25:87:c4:f3:c0:2b:02:58:1f:
1b:86:f5:e7:69:0c:f0:ba:87:ab:62:b0:54:e3:36:e4:11:63:
b7:c0:3b:4b:4b:7d:ec:07:aa:52:c0:8d:41:6d:3f:5b:4d:2e:
16:54:35:d8:48:9c:bb:22:c8:e7:03:51:61:7d:d7:a8:b9:a3:
99:46:80:2e:a5:6a:12:5d:87:4a:a9:37:6b:ac:ff:11:e3:24:
f8:17:a2:d1:cd:aa:8f:02:10:e6:fb:21:c0:8c:91:b1:4d:f5:
49:fa:56:c7:87:d5:d1:78:7d:3c:45:27:af:ba:ff:6d:bd:4b:
d0:4c:9c:b1:ea:f2:7b:d5:75:f8:d1:35:9a:9a:21:d8:b4:0f:
b3:4c:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:28 2025 by rpki-client