Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: Esp++lvXEFvpYnbTPxsAaDtCRrKo3Mv2n7SRINzPBWE=
Subject key identifier: 5F:CB:C4:B8:AC:34:14:F0:B1:B5:8B:AD:5A:FE:3E:D4:B3:94:1C:C9
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019A4E18AF7180F41DECE89EE7A9F1A83403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 10FC
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: PC0iL8xrdLGo/gUvJblACh4szFiaHbeXqRgub5CO2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:af:71:80:f4:1d:ec:e8:9e:e7:a9:f1:a8:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=5fcbc4b8ac3414f0b1b58bad5afe3ed4b3941cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:51:91:8a:5a:54:e6:42:e2:3f:39:0d:93:
10:14:95:42:9a:8f:ec:ce:34:f9:9b:68:bb:f0:7e:
69:c9:3d:10:20:35:cc:d8:2c:ee:8d:1b:52:bb:87:
69:79:fb:40:c0:08:a2:9e:f9:c8:5c:87:04:a9:af:
7f:af:32:62:b8:a5:3a:3d:78:6b:8f:0a:89:c2:0b:
9a:a7:ab:f4:1c:21:10:cc:e3:01:77:b5:48:8f:d2:
cd:73:d5:87:02:ac:1f:2b:c2:97:c5:c8:61:c4:30:
39:df:dd:3c:bb:3e:e1:5c:60:5e:7d:1e:2c:5b:53:
75:d6:d4:15:4c:e5:3d:b9:f1:aa:86:93:06:c6:91:
1b:37:c7:d1:bb:a5:8f:07:18:b4:8b:9f:32:9e:ba:
6d:d3:a3:27:8a:ff:72:b9:4e:84:bc:3c:65:cd:9e:
ca:0a:87:38:55:6f:82:b6:1f:fa:44:d1:69:d9:dd:
07:a2:a0:bf:7a:e8:ec:58:23:3c:d8:70:17:7d:bd:
40:2b:f2:a0:00:92:50:50:4e:6c:46:79:71:34:1c:
9e:c8:54:6e:90:b8:dd:c7:36:8f:57:5e:4a:29:55:
07:c2:63:23:6a:fa:1d:6c:1b:e0:92:4a:24:89:2b:
da:57:c2:85:14:99:ce:e3:6c:6a:3c:b2:ec:9e:6b:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:C4:B8:AC:34:14:F0:B1:B5:8B:AD:5A:FE:3E:D4:B3:94:1C:C9
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:35:6d:72:64:a2:9d:01:97:79:3e:2c:0a:60:86:53:0e:
99:65:8e:57:3e:28:8c:69:65:85:b5:39:8f:49:3c:09:1f:3d:
07:64:53:fa:c2:b6:05:e7:53:eb:f7:b3:89:4d:48:38:e7:5f:
fd:86:58:0f:ce:a3:93:10:30:7f:16:6c:48:d1:33:ac:64:94:
ec:e2:f2:6b:cc:81:57:b5:5d:56:6f:0c:53:da:49:94:8b:df:
5a:f9:a5:e3:e3:ba:4d:f5:49:00:a2:e7:73:a1:14:00:09:7a:
90:a6:03:1b:97:da:ba:db:9c:09:5f:29:52:64:f8:9e:30:26:
07:c2:a4:84:b5:0c:91:3c:a1:a2:a8:67:b0:ca:fb:d1:39:bc:
69:74:ef:b2:2b:3c:99:aa:6c:29:95:a5:98:32:6e:44:51:a2:
a4:1b:ef:e7:05:29:f9:6d:90:5d:df:18:94:4e:b3:0a:14:7b:
a5:79:bc:d5:6b:72:51:6c:f4:7a:e6:88:90:2a:eb:da:b4:a3:
2d:51:bb:ef:7b:da:12:95:c2:20:42:d3:86:09:35:5a:96:60:
c7:0a:d6:e1:6e:0a:d3:53:21:49:11:2c:68:0e:ad:9f:51:09:
e1:31:8f:26:95:75:77:46:98:7d:f9:82:10:f3:40:5e:40:58:
76:22:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:19 2025 by rpki-client