Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier: w28Xf+jw7AZ1eumlXe5OdOPNxUSJRJ1Y7FcbkAnOqUg=
Subject key identifier: 79:1C:0D:44:FB:51:9C:D5:90:FB:B4:62:32:B5:F0:B2:6F:50:AC:6C
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 019A4F997EBC86131A9A388D11877A55B70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number: 0B9D
Signing time: Tue 04 Nov 2025 16:00:50 +0000
Manifest this update: Tue 04 Nov 2025 16:00:50 +0000
Manifest next update: Wed 05 Nov 2025 16:00:50 +0000
Files and hashes: 1: 3N9UYLo0xUDRDj5u2ZGsggXWyM8.roa (hash: GzegVU/Yobk+zlKS0VWYX3GqVecmGnXDmHTuncP48uU=)
2: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: Wn7egXfWQgaOpgGSrAkQMXrm8HcIT2uSKUb+q+voPhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7e:bc:86:13:1a:9a:38:8d:11:87:7a:55:b7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Nov 4 16:00:50 2025 GMT
Not After : Nov 5 16:00:50 2025 GMT
Subject: CN=791c0d44fb519cd590fbb46232b5f0b26f50ac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:88:20:9e:10:bf:ba:82:83:3e:21:bb:2d:
80:1c:60:93:a0:f7:ed:f5:2e:ef:0a:b3:f3:37:cb:
e4:1c:53:3f:91:0b:db:cc:7d:68:1f:a4:27:62:cd:
c2:dc:ad:35:f7:fa:d2:44:87:bc:d6:60:4c:a3:70:
5e:36:33:12:37:fb:19:7b:4c:48:6f:0f:04:5f:52:
19:4d:21:ed:83:0b:2c:7f:91:0a:98:68:28:4a:12:
be:68:3d:ce:31:6b:17:6e:9a:c0:e5:fa:9f:ae:e2:
1f:00:53:0b:ed:31:aa:97:82:f7:7c:26:45:16:5b:
10:b5:0b:ae:16:9e:be:bf:f2:52:56:2f:c9:d3:2b:
e1:02:78:82:8a:82:b0:80:24:57:5e:13:71:e5:89:
d9:bc:72:43:07:f2:bd:ba:65:e3:5c:0d:4d:21:03:
ad:7a:0e:b3:a0:3d:60:f2:6f:fa:ee:56:42:e5:3b:
7c:2b:98:c3:05:9a:63:ba:59:ca:82:32:39:6a:0b:
8f:ab:76:53:78:1a:d5:a0:2f:09:5d:c8:ad:0f:fd:
25:9c:6e:72:12:b7:21:17:38:14:ee:ae:81:ce:8a:
8d:c5:50:71:bb:84:4a:2b:f5:ac:de:b4:e3:ff:d0:
6c:2c:3c:79:4d:0f:16:3d:98:e1:2a:72:0d:86:94:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:0D:44:FB:51:9C:D5:90:FB:B4:62:32:B5:F0:B2:6F:50:AC:6C
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ab:e3:93:2c:b3:4e:88:0a:1a:1a:42:84:06:48:cf:e5:38:
c9:19:53:89:f9:48:3b:71:5d:c2:60:97:9c:53:27:85:e7:e5:
8a:02:f0:b1:ef:92:c7:fd:d1:1a:bb:2a:6a:6d:c7:e3:4b:40:
4f:1d:48:ec:f9:ce:8d:66:d8:c2:c8:e4:e5:3f:7c:9d:0e:da:
d8:fb:91:50:b9:b0:1c:04:66:35:e8:a4:23:15:9f:3b:cb:73:
3d:16:37:c3:80:c9:4a:50:2a:bc:7d:b9:7d:68:ae:e6:6c:8b:
2a:2a:b3:84:8b:95:4f:7f:d7:55:c3:1d:5e:52:17:eb:63:43:
98:5f:96:79:3f:14:4f:ea:34:6b:67:95:60:df:d6:e1:8e:53:
d9:1f:f9:b2:af:31:f6:13:0f:ff:03:1d:1b:65:ae:fc:d8:bb:
56:d3:87:a2:ac:9d:38:16:8d:aa:c1:14:e8:35:0c:66:c5:f9:
73:37:db:0b:50:ff:a6:9a:a5:d7:96:ce:d8:f0:04:1d:2f:c6:
56:2e:43:f0:38:9a:43:de:12:3d:d5:42:d7:33:e8:4c:21:96:
d8:ea:61:a2:48:58:2c:4a:a0:8c:8e:48:e7:66:c5:3a:08:3e:
1a:86:d9:09:aa:0c:b1:79:c5:56:fa:69:86:5e:78:ad:04:97:
89:97:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:24 2025 by rpki-client