Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: +zF1OK7+F/t+JZwma2PA3iM7AxfgjQvnnxuRnA0Z7jE=
Subject key identifier: 4C:F9:C7:B0:45:BD:45:50:8A:10:F0:EC:E8:57:45:0C:48:22:A0:81
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019A50E37DBBED16535726047A92B7689DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 22:01:17 +0000
Manifest this update: Tue 04 Nov 2025 22:01:17 +0000
Manifest next update: Wed 05 Nov 2025 22:01:17 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: +GslEoq9xYXbOhBDtu9Zj6Z6dtm0j93SlZ33Y9X+nC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:7d:bb:ed:16:53:57:26:04:7a:92:b7:68:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Nov 4 22:01:17 2025 GMT
Not After : Nov 5 22:01:17 2025 GMT
Subject: CN=4cf9c7b045bd45508a10f0ece857450c4822a081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:8d:21:70:ea:f9:d0:49:eb:e6:7c:f8:72:
e2:c2:11:67:2e:77:9a:f3:93:44:be:ce:30:bf:5c:
cb:ff:a3:82:f8:e1:31:07:5a:92:15:d4:ef:4d:e8:
8d:64:f8:d9:ab:b1:af:c9:ac:d9:b0:b2:96:b2:60:
c1:c6:13:d5:a9:8e:70:0d:10:cb:51:b3:c1:d6:b6:
52:93:1d:68:83:85:44:1c:7d:da:20:b3:9d:c9:a9:
d1:b1:e0:27:ce:28:c0:4a:b3:a0:cb:01:3a:18:ae:
67:1a:e5:03:fe:41:2b:ea:ff:2f:01:e8:98:70:b7:
87:0a:7f:6d:10:0f:79:77:6f:92:cf:4f:f3:96:25:
c1:0e:43:f5:bf:09:ef:f2:8c:8c:de:37:21:a1:54:
6f:63:4d:a0:b7:cc:da:ee:e4:eb:9e:2f:70:34:ce:
a5:08:37:a6:87:ab:07:98:db:14:9b:48:d2:64:6f:
32:6c:05:9e:96:11:35:62:97:bf:28:69:b6:46:73:
91:a1:4b:b1:30:42:e0:31:28:57:e4:bc:a6:be:39:
78:b2:ee:bc:f2:b5:75:36:0e:77:d9:a2:19:75:f3:
ad:e7:06:e7:26:eb:79:47:d2:7b:f2:41:bd:d5:69:
4f:ef:8b:10:78:de:94:0b:63:8a:48:a3:e3:2d:79:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:C7:B0:45:BD:45:50:8A:10:F0:EC:E8:57:45:0C:48:22:A0:81
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9c:86:bf:14:0b:59:15:d5:a9:60:3f:19:a4:51:8b:79:3b:
51:88:5c:55:97:67:ce:44:7c:5b:b1:3f:e6:18:80:e6:47:48:
9e:89:fc:35:52:3d:c9:64:cc:a4:5b:28:d3:99:a4:7b:91:c9:
dd:2b:ad:f4:a3:ec:e9:5d:31:cb:ea:7a:a3:04:8a:e6:b3:df:
22:5f:60:b6:0d:50:25:1c:02:4a:d3:13:77:af:63:8d:7b:c1:
dc:78:20:4b:be:51:77:3b:52:15:b5:2f:9c:8f:19:a7:4d:a3:
12:aa:42:39:2e:bb:9c:99:48:90:10:b4:63:7b:4b:7e:bd:87:
ed:26:f3:40:7a:52:d6:66:0d:a2:27:40:3d:23:86:f7:4e:0e:
02:7e:3c:89:bf:84:63:e2:ac:b2:17:26:80:a0:db:12:b0:b1:
b3:d8:a1:f0:f0:91:20:31:cc:c9:e1:28:f8:7e:b6:cf:ef:4a:
a3:88:4c:31:d6:a4:9d:25:d6:fc:d4:39:e0:33:a4:bb:e3:08:
5b:16:60:3c:6a:03:bb:3b:75:0b:45:22:d4:a8:13:0b:89:96:
27:90:a3:f6:fc:d5:23:51:69:cd:0d:db:39:90:e4:25:1b:86:
d4:09:26:00:ed:ff:00:63:52:92:b1:84:ea:09:15:97:d6:f1:
39:51:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:17 2025 by rpki-client