Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File: 44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier: 8T1gR9NfjNbucGg5Q2nQbVPJ/zKyBXcQGvG1SZzVmkg=
Subject key identifier: 21:4D:B8:FB:4A:B8:8A:E4:ED:DF:3E:BE:1F:18:15:38:20:D7:D0:2C
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer: /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial: 019A4C6167CAEC20437ED8A156B02B43586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number: 13B8
Signing time: Tue 04 Nov 2025 01:00:43 +0000
Manifest this update: Tue 04 Nov 2025 01:00:43 +0000
Manifest next update: Wed 05 Nov 2025 01:00:43 +0000
Files and hashes: 1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: g9PfbXeyc/hlpwcubDv+qaGm8fI7QdY4BDbjijmj5QQ=)
2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:67:ca:ec:20:43:7e:d8:a1:56:b0:2b:43:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Validity
Not Before: Nov 4 01:00:43 2025 GMT
Not After : Nov 5 01:00:43 2025 GMT
Subject: CN=214db8fb4ab88ae4eddf3ebe1f18153820d7d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:64:41:71:af:8f:aa:f0:19:6a:ae:9b:7b:
06:29:e6:7a:f7:28:00:ac:1d:12:3a:06:e2:03:ee:
a2:63:73:26:38:5e:da:c3:29:09:ce:a9:8d:1e:42:
ea:37:b7:b6:30:8b:2d:36:46:31:ff:f6:0f:5d:6f:
1f:77:1e:ce:25:51:b2:87:fd:b3:3f:ed:a5:8e:53:
71:b2:b9:a8:f8:e4:2c:28:0e:fd:19:f4:96:05:3a:
33:ed:c1:c6:a7:9b:ec:c4:f3:ab:ef:b7:8a:5f:7b:
cc:a8:c6:84:12:d5:53:fb:8d:b0:1b:d8:3e:42:76:
d4:0e:f6:fe:97:7a:9f:aa:86:3c:f9:6b:19:42:09:
03:18:64:be:93:86:c8:2f:0e:90:b1:c5:92:af:65:
66:15:c3:f9:fd:f6:ee:68:d6:b6:1d:78:88:3a:c2:
97:28:33:b0:c1:b9:59:b3:dc:1e:88:45:0d:20:5f:
5f:2f:e3:cc:6f:9a:79:e5:9d:02:11:98:aa:03:96:
10:31:71:47:14:93:e5:29:f5:ae:fd:b4:2d:36:03:
81:5d:1e:94:20:37:75:05:b4:68:a2:5f:f1:8a:6f:
4e:df:e5:09:c4:f7:ec:22:df:1d:79:9c:0f:e2:a8:
e0:06:8d:79:f3:f8:97:49:c1:1c:26:56:e3:a3:a0:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:B8:FB:4A:B8:8A:E4:ED:DF:3E:BE:1F:18:15:38:20:D7:D0:2C
X509v3 Authority Key Identifier:
keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:6a:4e:18:17:fa:f3:3b:e7:0b:27:d7:46:ff:15:03:1e:
6f:6e:3a:d8:91:28:fa:7e:59:4e:c5:b0:4e:da:34:15:dd:91:
58:cb:9c:f3:63:f0:36:e5:92:4b:c2:23:22:a1:1a:20:e6:23:
cd:3a:89:d9:24:88:39:b6:38:77:5f:aa:c4:1f:a5:c0:94:cd:
ec:0f:92:b3:20:27:42:64:2c:8a:8d:f7:29:56:c3:df:ab:c2:
8f:cd:d8:63:b5:85:ce:d6:fc:43:ec:d9:64:b6:d8:79:b9:51:
c8:93:4f:37:9e:86:6a:83:6b:80:95:1b:23:a0:68:60:a0:58:
9f:4e:df:b0:88:39:01:5b:24:67:d1:31:32:6e:f8:95:dc:52:
41:58:a5:d9:aa:b5:f5:29:51:25:32:da:9d:98:39:23:da:b8:
92:2a:30:ef:5d:49:84:fa:05:c8:18:41:9a:64:fb:72:42:e0:
9b:c2:cc:8f:e8:1c:6e:c5:87:78:a6:b4:e3:0d:8c:ab:b6:b2:
da:95:37:79:c0:98:1f:39:2a:a0:5e:88:e8:eb:db:22:61:df:
70:97:0e:78:8b:7b:3b:3c:9d:af:2e:23:88:a8:31:62:df:cd:
c2:02:8e:27:1b:15:3c:67:b2:e1:de:c5:bb:82:50:38:c4:5c:
17:c4:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:20 2025 by rpki-client