Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: TCsIFqmGoRWEmHf/Jq2N29KIQ4hu+nxjglGdLhAw6LI=
Subject key identifier: 42:F0:F1:D7:01:D6:1A:E1:B7:AD:F9:A6:37:D0:4F:AE:BB:AB:58:3A
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 019A4FCFCF05703D32A657A51BAF3F35FBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0BB2
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: fBb2NLl2wSFlVlP+cKLy5pFfwnYVqQyDmJ3bCSdg9Cc=)
2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cf:05:70:3d:32:a6:57:a5:1b:af:3f:35:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=42f0f1d701d61ae1b7adf9a637d04faebbab583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:d9:08:56:11:94:4b:ac:86:05:05:a0:26:
60:69:fa:03:92:64:f6:77:09:39:a6:01:13:1a:f4:
5e:75:b4:b7:6e:98:ba:0d:10:89:1d:45:b6:9d:6b:
83:e5:88:76:11:83:89:eb:44:51:1e:87:8b:1b:2e:
80:7c:13:29:e9:ad:cb:17:36:60:7a:bd:56:ab:ad:
c3:90:6e:97:c1:d7:dd:4a:4f:e8:30:8b:9b:d2:69:
48:80:26:bd:87:43:f5:da:17:03:79:0b:a2:66:b8:
72:62:b6:57:44:ff:be:e1:a5:16:9e:eb:11:d6:6a:
b9:ff:5e:b0:97:c8:05:87:b9:e7:2e:49:8e:92:22:
c1:14:01:ea:b8:ab:7a:7e:54:c4:79:49:7b:44:36:
17:6a:4a:7c:29:7b:bf:bf:13:bc:2d:4d:9b:1b:da:
bc:01:91:2b:ec:16:8e:41:3a:81:55:70:f4:c4:00:
8f:25:e3:b6:b7:6d:36:db:f0:b0:d0:ae:5e:de:5c:
25:dd:89:f6:cc:73:f2:39:9f:fc:f3:a1:0f:1d:00:
4b:42:46:aa:e0:59:0b:db:e2:80:5d:46:1f:dd:11:
f6:63:bb:df:35:8d:f2:57:22:88:2d:21:5e:ed:db:
f4:c9:07:93:04:37:e8:47:1e:44:90:7f:56:5f:50:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:F1:D7:01:D6:1A:E1:B7:AD:F9:A6:37:D0:4F:AE:BB:AB:58:3A
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d6:b2:26:cf:75:30:6c:e6:64:57:72:71:c8:86:fc:37:7b:
9d:82:11:f4:e2:bf:bf:6a:1e:c0:25:a3:b5:4a:90:06:9a:46:
8c:31:9d:dd:6d:4b:be:97:6d:1f:7a:c2:e0:6d:75:1c:e8:16:
82:32:c0:b5:78:9d:6e:80:c3:a7:32:5e:78:77:87:51:48:a8:
83:1b:9d:e3:60:ed:ef:c4:ca:e5:86:53:e2:bb:60:8e:f3:dc:
7e:1c:c5:e3:69:c2:a7:bf:5a:99:ec:e7:fd:53:8b:fd:d0:9f:
aa:b4:2d:68:ec:1d:c5:dc:f1:8a:d5:20:f6:d2:ab:bc:3d:e8:
84:b7:ce:32:4a:dd:61:25:6c:00:72:02:88:2f:5e:38:e2:37:
00:60:20:02:85:c5:28:af:f1:5c:99:79:1a:7d:e9:99:12:84:
4f:5e:b3:f5:39:4e:c4:07:27:7d:b6:9a:6e:90:58:1d:18:ce:
4c:32:cc:e6:41:22:9c:d2:5e:7d:de:63:da:f3:46:17:cf:1e:
a4:bd:1a:df:b7:a8:23:48:f0:4f:27:20:e0:84:71:06:0e:4b:
fa:a6:ca:04:bb:94:16:3b:e2:56:dc:fc:e7:62:1d:a2:57:81:
00:00:6a:62:31:f5:7d:7b:f0:6d:41:ba:98:8b:2a:1d:ac:ef:
e2:57:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:22:07 2025 by rpki-client