Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: J2OrWo93AQmUUwNmhYgQiazs/CLZo9CngVdErIuA/3w=
Subject key identifier: 88:48:53:37:5E:53:41:75:BE:02:37:35:84:24:6C:12:86:F7:CF:14
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019A563FC92DE2414674651F1F2987467B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 025B
Signing time: Wed 05 Nov 2025 23:00:12 +0000
Manifest this update: Wed 05 Nov 2025 23:00:12 +0000
Manifest next update: Thu 06 Nov 2025 23:00:12 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: RXXPwjjpKlUEqSrLibSAiy52tNvjiGJjp7QHpQpxeN4=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:3f:c9:2d:e2:41:46:74:65:1f:1f:29:87:46:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Nov 5 23:00:12 2025 GMT
Not After : Nov 6 23:00:12 2025 GMT
Subject: CN=884853375e534175be02373584246c1286f7cf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:b4:85:fd:96:88:f7:10:11:27:40:56:2b:
a1:61:58:b2:30:6f:3b:83:13:8f:59:8c:e1:04:fb:
0c:9f:90:0f:57:e6:fc:01:7f:61:49:44:70:53:88:
76:0f:e7:0d:a9:b2:6d:82:df:ea:ec:b6:20:09:d5:
77:44:5c:65:1f:81:53:4c:3d:d0:10:c6:cc:53:7d:
e0:dc:8b:e4:94:ba:b5:fc:72:fe:d2:21:01:40:b2:
7d:f3:c4:60:56:fd:7b:84:de:45:9b:71:c3:ea:c6:
68:64:51:bd:9b:eb:21:c5:1f:a7:1e:04:2d:29:05:
9c:03:4b:e6:28:c7:ea:f5:58:53:78:64:a5:33:18:
b0:f3:cf:cb:2d:4b:7f:e0:9a:7a:9f:a5:f6:17:1e:
c7:b5:e7:41:d2:d3:70:95:72:d2:a2:67:f6:5d:25:
7f:b4:b6:84:e1:86:e5:8d:d9:09:1e:51:16:5f:c7:
ae:71:c0:9d:41:d4:35:68:28:5e:e3:c6:e6:b2:f5:
62:9d:a3:10:7c:0e:e8:9d:71:ce:e2:92:fd:b5:f7:
b4:ef:16:d7:70:49:1d:f7:5e:9c:60:cc:a8:d4:fe:
ef:49:c2:97:c9:21:0f:8e:5f:5b:27:f0:a6:49:bd:
65:5e:b7:48:25:7b:7e:eb:28:ec:00:89:ef:87:14:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:53:37:5E:53:41:75:BE:02:37:35:84:24:6C:12:86:F7:CF:14
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:c6:1f:6e:20:b1:34:5c:b0:1e:83:f8:38:55:05:d8:a3:
10:3c:5e:cd:97:0d:b0:91:9e:59:d3:aa:97:07:79:65:54:ef:
98:76:05:3b:d4:13:58:8d:1b:d9:e2:1b:bd:e9:6a:93:f7:0b:
26:64:91:39:2c:c0:a4:97:6a:41:1c:17:a1:01:fa:f2:8d:bb:
46:b8:3b:ee:e7:1f:fb:b7:cd:5d:ac:2b:4c:ac:24:7a:33:c2:
28:27:30:bd:c3:21:28:9d:68:c5:e7:7f:e3:2a:78:f5:15:5c:
bc:20:e6:ae:f2:34:1e:04:3a:5c:88:dd:7c:94:af:7c:a8:5e:
a5:27:ca:78:d4:f3:cc:1f:1b:e8:8e:14:30:ae:d7:17:aa:08:
24:4e:e0:bd:e0:55:8e:39:54:55:e0:7c:79:83:4e:5f:d9:86:
35:e7:c5:48:35:3a:1b:8d:1f:f9:d7:e9:74:49:75:f4:d4:ca:
b4:7c:66:74:8a:97:96:9e:11:1a:43:5e:84:5d:e2:90:50:ec:
d5:9a:fc:51:b5:0b:13:7f:58:4b:68:e0:1b:c3:6f:63:72:4e:
ee:b7:94:32:e8:d1:b3:21:07:9a:88:43:f6:2b:9d:ce:42:35:
a6:93:c8:7a:65:75:b5:1d:5e:02:4a:8f:16:40:e3:29:c6:51:
57:a9:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:06:12 2025 by rpki-client