Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: Ik9dZ03C64IAQ1CrXjxIR6TkFx2SuiZlX3rkQSgVd2M=
Subject key identifier: 42:02:8C:B3:84:44:0F:6E:0D:B8:39:8B:DE:AF:E8:B4:F5:9B:BD:32
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 019A4DAB1ADAA4AB1ED9EC2D7B3194165F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0F0B
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: njVBPOCiGdy5LHZtGtkOa2tWkGWCziMj5rC2QQeT0a4=)
2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1a:da:a4:ab:1e:d9:ec:2d:7b:31:94:16:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=42028cb384440f6e0db8398bdeafe8b4f59bbd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:4c:aa:19:ab:c7:ef:d8:83:87:9a:1e:fc:
e7:ff:ce:1e:eb:91:97:74:06:fc:9a:f4:c1:df:35:
e5:92:1c:d2:70:8e:8e:ac:13:f9:56:7b:4b:8a:1c:
53:e5:2d:2e:fe:ec:ef:38:f9:dd:8f:fc:30:dd:b4:
50:63:cc:62:fc:a1:09:db:63:08:3c:38:5b:a7:65:
ab:22:e9:b2:90:f2:d4:8b:ad:87:f9:23:ff:94:37:
5e:6a:9c:74:04:8a:84:90:f2:32:91:c2:9c:19:81:
14:8e:47:88:ef:fd:a6:c0:48:42:34:75:b2:bf:ff:
95:9c:b1:e3:aa:e3:7f:41:61:ea:7d:b2:2c:77:72:
fc:da:df:01:cf:c7:37:19:d7:49:03:ba:6b:6e:96:
8c:44:91:96:7a:ac:32:3c:db:d6:fa:fa:88:f5:32:
d0:88:70:2b:bd:97:3c:db:b5:94:73:a0:bf:87:ad:
34:94:19:99:19:d4:81:a7:4c:52:8c:aa:59:49:bc:
a7:05:c3:8a:62:72:02:f1:06:f9:ff:f5:1f:9e:d9:
9d:94:e3:9f:af:29:7f:ed:e9:1d:e0:40:f1:5e:33:
50:4a:51:a1:83:9e:78:de:96:54:05:ed:6d:3f:01:
06:5f:44:66:73:5b:f6:09:a2:95:9d:a9:c7:dd:be:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:02:8C:B3:84:44:0F:6E:0D:B8:39:8B:DE:AF:E8:B4:F5:9B:BD:32
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:97:a4:3c:05:1b:e1:02:05:09:c7:11:0a:77:0d:fd:86:b9:
4f:4b:53:b1:0b:a1:9b:90:88:58:d8:09:b3:c8:e1:7e:39:b6:
db:7d:be:f5:12:a0:18:ba:16:2e:ab:fb:c7:33:eb:20:fc:0d:
65:bd:e1:b9:ce:9a:63:a3:f8:91:16:cf:93:44:1a:e1:b8:0e:
89:30:98:fc:30:f9:b6:79:1a:5e:1d:b0:42:00:c3:08:d7:8e:
af:90:cb:f6:50:4e:0b:92:63:d2:c5:4a:a9:46:dd:4c:98:ca:
63:eb:bc:70:32:2d:a4:1c:a9:aa:a3:e5:a1:cb:23:bb:e9:33:
c0:3a:65:be:90:85:5c:d8:20:97:77:cc:ec:98:53:dc:65:dc:
d9:a6:47:d8:87:3a:5c:cc:9a:da:6f:56:88:17:96:dc:f2:0d:
54:e8:85:17:1f:28:b5:bf:29:11:da:8d:a3:d0:8f:fd:54:8c:
fe:30:a7:d8:8e:2a:50:25:e5:0d:c4:69:88:17:03:c4:cb:dd:
b3:0b:33:a8:fc:55:80:b4:fc:d5:e1:a9:5c:b0:a6:b2:dc:46:
12:79:73:b5:01:fa:e6:22:a9:52:e5:46:5e:2e:a5:81:2e:33:
d8:ea:7d:a9:be:fa:ca:97:9a:22:f6:67:80:1d:b7:6e:d2:04:
cb:4d:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:19 2025 by rpki-client