Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: g0C3A08M5dw8Su6PgQWoyIwBj80p+4r/ReMk+6l6ZKo=
Subject key identifier: 5B:97:3F:E9:AF:31:7E:26:74:F4:69:E5:BC:83:4D:2B:DC:98:68:D1
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019A4C6190EED092CA3A827F7990D9E66EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0519
Signing time: Tue 04 Nov 2025 01:00:53 +0000
Manifest this update: Tue 04 Nov 2025 01:00:53 +0000
Manifest next update: Wed 05 Nov 2025 01:00:53 +0000
Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=)
2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=)
3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=)
4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: HwyhKG390ySCQXDqSl7masY2tP3QhY27wNxlROLasag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:90:ee:d0:92:ca:3a:82:7f:79:90:d9:e6:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Nov 4 01:00:53 2025 GMT
Not After : Nov 5 01:00:53 2025 GMT
Subject: CN=5b973fe9af317e2674f469e5bc834d2bdc9868d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:ff:6a:98:3a:5a:8e:ba:09:ea:0d:07:04:
ec:7e:28:6b:19:df:b0:a3:d9:dc:66:67:95:d5:cd:
ee:d5:fb:15:b6:d9:c0:3c:a4:39:fb:e6:76:fc:a2:
69:63:18:7d:3a:bf:41:f5:79:5e:ea:55:df:90:a3:
41:b1:42:bb:07:21:6b:89:83:ba:7d:0b:32:2c:d3:
ef:79:cd:96:2b:1b:3d:9a:ca:88:ad:1f:03:e6:2c:
3d:9f:0d:2c:b5:2d:b1:e7:5f:05:14:c6:22:ab:4d:
64:99:8a:09:1b:45:a5:c3:0b:ee:30:44:45:21:23:
ab:6e:77:bc:c8:62:62:f4:30:91:6b:0a:75:03:bd:
19:6d:1b:1a:6c:cd:32:f8:ef:94:e3:06:fd:bf:79:
5e:cf:c7:4b:13:e5:62:87:cc:6c:84:4b:60:f4:99:
26:c9:54:0b:ec:d1:4c:a7:83:f5:26:d6:6d:3f:4a:
e1:a8:9a:05:89:a2:da:40:f1:1e:de:96:c1:c7:7b:
bd:18:d0:3c:dc:ed:1c:95:a3:3f:53:00:e0:5f:ff:
3b:5d:32:26:43:3d:19:92:a9:42:6d:c8:91:93:ec:
c3:36:35:2f:10:72:a3:2e:52:ac:85:a9:aa:0f:80:
bd:3f:fb:f5:12:d9:f5:50:12:4a:28:34:1d:a1:da:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:3F:E9:AF:31:7E:26:74:F4:69:E5:BC:83:4D:2B:DC:98:68:D1
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bb:7e:66:e2:f3:91:6e:7d:b8:62:76:6f:14:de:34:c0:3b:
07:cf:ef:e3:dc:24:c2:e3:a6:a6:4c:68:3d:e2:01:53:88:22:
9a:d2:ac:3b:94:89:ac:35:08:b8:be:c9:3b:3a:b4:1e:85:56:
8c:2f:05:0a:b3:c1:3f:75:34:fd:4b:09:53:28:b2:90:87:70:
e2:e7:ce:67:ea:d1:29:91:86:65:c5:0b:6a:37:29:96:7c:ff:
19:56:4e:d0:c7:80:ca:31:6a:d4:50:8f:e5:52:68:c6:6b:fb:
ba:67:25:f4:c1:20:af:f0:f6:ef:c6:cc:50:65:ce:47:9f:9d:
cf:97:62:6a:8a:80:74:c1:e7:e1:f4:b4:ab:a2:c6:97:cb:46:
7e:49:80:6d:68:0d:59:d9:da:18:65:a3:e2:b9:d5:88:c9:f0:
32:2e:49:3b:bc:f7:bb:b0:63:f3:7b:98:84:4c:45:4f:26:99:
b0:bc:84:09:f4:50:c3:1c:3f:78:72:c3:61:63:57:96:18:e3:
c2:1a:72:10:b7:97:32:94:c3:a7:67:a7:0d:1d:75:da:21:96:
2a:4a:39:c1:cf:ad:37:11:b6:0d:59:06:87:8c:3c:fd:f1:2f:
49:64:17:ed:08:fd:88:0b:19:33:10:79:b9:07:63:6d:cf:ca:
54:12:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:31 2025 by rpki-client