Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: nLqb8xDqDVI65j+CFo3XmqJf09qa5CgzgzhZi+J3L0k=
Subject key identifier: 8B:F7:00:7E:CF:97:80:FB:8B:63:24:DF:B9:EC:DF:B0:99:92:A9:07
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019A53ACC7C1B1AC87C498182B71A15DE78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 12F6
Signing time: Wed 05 Nov 2025 11:00:23 +0000
Manifest this update: Wed 05 Nov 2025 11:00:23 +0000
Manifest next update: Thu 06 Nov 2025 11:00:23 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: nHbK8NvBNfhEBW3knkPI4ki2Teqlj1cggihpS+1H6+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:c7:c1:b1:ac:87:c4:98:18:2b:71:a1:5d:e7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Nov 5 11:00:23 2025 GMT
Not After : Nov 6 11:00:23 2025 GMT
Subject: CN=8bf7007ecf9780fb8b6324dfb9ecdfb09992a907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:3c:98:a5:07:5d:62:54:9b:ed:a3:16:49:
00:b3:7f:a2:c1:36:8f:88:a2:25:4b:3e:92:aa:3d:
13:e9:7b:74:cf:f4:88:36:6e:3d:57:dc:dc:93:61:
a3:4f:94:db:b6:ab:5a:46:c3:aa:76:03:b8:2e:af:
72:9f:f1:c7:9f:44:5c:60:b4:ea:10:b3:5d:7f:02:
01:fd:7a:be:98:bb:d9:15:d7:a8:51:63:d7:f0:cd:
8c:85:da:2c:b7:4a:2d:04:ea:0d:6e:b0:13:bd:8c:
09:35:36:d0:8b:d0:ef:d3:eb:21:8a:c7:a5:64:56:
ef:56:36:06:2b:ca:24:36:4c:bb:09:3a:a3:a1:72:
85:b7:dd:82:ac:c2:fc:2f:d9:2b:61:cb:c2:75:cf:
57:f3:32:8e:f2:45:aa:30:eb:ab:9a:95:03:42:82:
26:86:3a:12:2f:40:e9:0b:10:b2:f1:80:f3:dd:90:
42:69:35:25:79:40:2b:d0:43:24:7d:d7:76:41:e5:
55:cc:3d:f4:d4:d1:37:36:fc:98:b6:46:e3:64:94:
ac:86:6f:ca:49:88:1f:af:e2:7e:6f:50:16:c3:8a:
b2:7c:13:45:56:75:fc:db:ea:07:6d:d0:db:2e:a3:
2d:42:8d:08:da:c1:b5:3b:5b:b6:b7:75:ca:f1:70:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:00:7E:CF:97:80:FB:8B:63:24:DF:B9:EC:DF:B0:99:92:A9:07
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:99:fa:f5:b8:e5:ce:f6:0e:00:fd:5b:dd:6a:aa:a2:11:
9c:52:d6:16:7a:2b:02:0a:79:59:b9:35:34:73:b3:fc:9b:55:
2b:2f:29:c3:e7:f6:4b:3c:cf:6d:bd:a9:e3:8a:df:97:91:ba:
1e:ab:cc:9f:80:a0:b3:cf:0f:57:20:67:15:cf:13:0e:fe:aa:
bf:d7:11:e8:3a:70:08:20:d0:30:bb:fc:99:54:ef:45:8b:ad:
aa:b5:8e:38:93:d1:30:c8:16:27:e6:6d:c0:d5:ee:78:30:13:
9a:ca:9b:ce:59:db:38:9e:1f:a3:62:45:2a:a2:e1:e8:22:e4:
83:31:ac:6d:11:ca:71:9f:a9:01:0d:07:4a:1e:b9:ed:69:42:
31:a5:15:45:7e:8a:11:be:5a:c7:42:47:ca:a1:17:01:ba:b9:
94:cb:8d:54:f0:c7:42:91:f1:9e:de:cf:b0:fd:cf:7b:3f:12:
5e:88:d2:98:55:67:59:76:ff:f5:8c:38:36:7e:57:d9:a7:d2:
d0:0f:75:12:86:99:8f:11:78:cb:fd:7a:61:2e:81:b8:2b:e1:
37:73:75:2d:14:9e:c7:49:fe:7c:34:95:80:a2:f8:49:0e:8e:
8c:a0:75:a1:9c:b0:4d:19:95:77:36:66:52:fb:e7:b6:b4:5c:
21:2b:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:35 2025 by rpki-client