Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: UjNh9fj3EXeMRjmdoSe+wJFQllmBcuL3w+yPRgnPnug=
Subject key identifier: 6F:10:C9:54:59:E6:31:8E:14:87:C9:96:DA:23:B0:7C:14:78:BC:88
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019A4EF4812762F6D866BE3B294ADADB519A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 16E0
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: 4YVxbr5L3Fo+9xryAtqgLTB8b2DIZwkKz9MY+k7MOoE=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:81:27:62:f6:d8:66:be:3b:29:4a:da:db:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=6f10c95459e6318e1487c996da23b07c1478bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:19:51:2e:12:f0:e0:c5:21:60:0d:4d:f6:
e5:7b:c4:55:89:e2:07:4a:32:d9:df:e4:4a:67:a4:
fa:02:16:a6:31:0b:60:ff:f9:1c:37:56:d6:c9:68:
65:6b:be:ad:c5:2f:4f:be:3d:23:91:f3:84:c1:4c:
b1:f5:9c:1d:4a:49:1a:30:bd:f9:52:7d:82:84:6f:
74:6d:01:b7:ab:64:c7:20:36:32:9c:e6:b8:b8:5a:
8b:a7:f4:9e:4b:8c:6c:7d:9c:77:2b:db:51:9b:52:
c8:89:08:37:1f:ff:92:5e:a9:a3:26:cb:e3:98:76:
46:4e:dc:93:dc:4d:c2:f8:31:2f:71:b9:9c:fa:73:
6b:3c:72:1a:50:35:94:23:23:e8:5a:94:e3:f6:3f:
fa:f8:04:d2:ce:91:35:1b:64:50:e7:84:d3:37:58:
5e:3a:71:31:33:ef:4f:28:97:98:e0:79:cc:eb:4f:
9d:2e:42:1b:7c:c1:8e:ab:3b:9b:84:47:9a:23:5c:
59:d5:4f:2e:03:ae:87:5f:d0:c9:56:2c:75:8c:fc:
33:5f:41:9a:4f:05:13:ee:6c:62:17:30:e4:f4:0b:
da:f2:fb:a1:01:0c:19:77:04:e6:b2:80:dd:4f:f8:
da:d6:14:21:0b:a5:58:11:45:fa:6c:7a:95:46:02:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:C9:54:59:E6:31:8E:14:87:C9:96:DA:23:B0:7C:14:78:BC:88
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:1b:16:30:85:90:4b:f0:fb:8c:2d:f6:c8:a1:da:c8:06:
58:ad:f8:d7:29:a7:da:8f:e8:83:ee:46:a0:7f:78:87:1c:7b:
2f:9a:c6:96:30:cb:f0:d8:09:f3:f2:5d:f2:97:e1:12:fb:a9:
ad:f6:17:0c:bd:bd:d0:6b:ab:52:d0:0c:f5:0b:c1:4f:3f:49:
05:c9:dc:bf:59:a2:48:2c:8b:58:6a:f8:19:77:17:06:6b:9a:
0d:c6:b6:9a:92:03:24:07:5a:14:54:a3:e7:03:84:22:af:6c:
f0:ca:a4:fd:63:54:45:ee:97:33:02:ad:9a:44:0b:86:81:6e:
78:bd:c8:10:03:f9:2c:9e:6d:62:3e:c0:4d:e9:72:41:28:42:
f8:d5:06:b5:a8:c5:81:72:95:03:7d:19:ca:e8:0f:06:86:a3:
e1:b0:58:f4:4c:b4:1b:62:7b:38:d4:90:5c:5a:79:3d:71:f9:
49:e6:13:cb:fe:5b:06:c3:be:74:98:03:1c:74:44:a5:d0:f5:
21:7e:47:2b:61:d9:34:14:65:da:a9:b2:ee:95:3f:ee:50:2b:
cb:1d:89:35:5b:a1:fa:33:c3:42:4d:ec:80:8a:b3:bb:41:2d:
bd:7b:bf:b4:b0:01:3f:db:e7:dd:0a:42:bc:1f:0b:4f:84:54:
b7:72:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:36 2025 by rpki-client