Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: Xje7zY42H9WCH7pLBhzmkpp+XlXBzUdQQP33oXgMwiI=
Subject key identifier: C8:68:75:1A:47:13:8C:2C:CE:92:56:36:43:61:53:E7:8C:E0:96:FF
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019A4DE1FF718F3EBF5E4EA68D64205B76ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0DA6
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: dXWy/kxVr2R2lg73mr7TIA+APOy4gMdAlPksGMpjAZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ff:71:8f:3e:bf:5e:4e:a6:8d:64:20:5b:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=c868751a47138c2cce925636436153e78ce096ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:77:a3:15:92:3a:06:a9:e9:2c:da:9c:cb:
d7:9c:15:32:d2:2f:de:3e:14:c5:38:86:5e:b1:a2:
aa:78:1f:0b:32:ae:1b:98:9d:83:10:50:10:39:ce:
34:2f:ae:d8:e0:29:6e:c7:18:c2:c2:40:7e:bf:9b:
87:c2:4b:c2:77:32:76:cc:04:c9:da:4d:07:e6:19:
3f:b0:14:09:e1:59:c4:3e:da:70:ad:97:f6:21:99:
a6:7f:8e:ed:74:25:c1:20:42:dc:95:85:a3:69:56:
d1:70:27:af:e7:95:93:56:83:44:d1:9e:37:49:65:
43:ee:27:7c:12:ee:46:20:c2:29:34:b0:2d:b4:25:
76:00:69:a8:e2:ae:fb:c5:e5:72:62:0b:37:d7:49:
3c:90:35:21:47:50:f2:d5:c6:cf:cf:b7:29:70:1d:
8f:b7:b4:36:bd:4c:2e:39:8c:07:2e:52:1c:6b:3f:
74:42:70:c8:de:35:bd:10:5c:3b:63:f2:8e:a5:fc:
9b:2c:fc:fb:de:19:bd:3a:dd:bc:6f:e7:38:b4:6e:
98:03:8f:46:d3:95:8b:3b:11:2a:67:98:e0:5f:bb:
84:f8:d8:84:3c:4b:2c:90:ed:df:d0:1e:e8:09:ba:
0c:e7:1f:29:ee:3c:89:37:46:5b:ef:27:ce:9c:f3:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:75:1A:47:13:8C:2C:CE:92:56:36:43:61:53:E7:8C:E0:96:FF
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:5f:71:42:fe:d8:ba:6c:0a:43:1d:3c:ed:7e:ef:7c:fc:
32:7e:e1:c5:d4:02:87:ef:f8:5d:46:4f:ff:45:f1:67:1c:6e:
ec:3e:76:cd:a0:81:55:b4:3e:5e:d6:8d:22:7a:42:a2:5d:19:
fd:a7:bc:4a:c7:4c:91:02:71:5d:0c:53:ea:a4:2d:71:34:2d:
e8:1f:80:01:e6:b6:58:e2:54:aa:9f:e8:19:10:9b:c0:ad:7a:
a5:b8:cd:27:d9:b3:0a:b4:62:49:34:3f:50:8b:e8:f8:6d:fa:
97:1c:af:bc:74:62:6f:7c:bb:04:c7:5f:4c:6d:0c:dc:e1:c3:
1c:10:ac:93:55:ac:e3:f1:db:04:50:a4:ba:12:b7:2e:e2:ce:
f1:45:bd:9b:91:8d:89:dc:d0:d4:8c:8d:f3:fb:2e:ad:de:4a:
44:98:c7:ef:df:02:b6:ed:f0:62:62:3e:98:c1:f4:7a:26:fb:
76:e5:e1:2b:a4:9d:77:d6:5e:9f:bf:56:27:10:3f:4e:29:b3:
77:b1:3a:d0:aa:4c:2a:08:e6:2c:25:92:e2:51:ce:f0:0d:f8:
d4:c2:65:e4:b3:e2:6d:7b:92:a5:e1:84:51:0c:f6:0b:69:c1:
dc:fe:88:5a:41:50:a3:83:39:4e:23:7e:17:cd:fb:b0:6f:4b:
86:83:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:19 2025 by rpki-client