Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: SQEHyME65TIPYR8WidkZTS4qtH1VJi2LqvpC+TMLgKU=
Subject key identifier: EF:D4:C9:16:32:07:CC:B9:FF:B7:8C:A1:F0:57:FB:6D:58:D4:93:65
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019A4EF5056BF65D021FCFC942F511704175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0B84
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: rE+1qAIwAQRyngAbsnw6NcmHiNWwbIVse45EXdH8NzI=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:05:6b:f6:5d:02:1f:cf:c9:42:f5:11:70:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=efd4c9163207ccb9ffb78ca1f057fb6d58d49365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:9a:f1:ee:38:35:43:29:58:24:b2:e5:dd:
3c:76:d4:7a:5c:3d:2a:68:90:6f:01:27:53:a9:31:
a1:82:d9:b3:b6:d4:79:d4:fb:42:ee:cd:3f:6f:a7:
9e:e6:d2:87:e9:8a:d6:15:9c:6d:e9:29:de:3a:fd:
5a:59:49:e8:1c:46:01:0c:34:26:e4:28:18:13:41:
f6:8c:62:71:ff:17:8d:2d:ca:8b:d0:17:fa:e4:c0:
56:bb:72:0c:a2:ba:2d:37:79:4f:df:6f:8f:16:24:
6c:c6:57:c8:01:3c:72:d0:84:e2:33:98:c8:56:d6:
39:22:f2:fb:3f:c8:0b:cd:22:1e:91:21:3c:54:b4:
11:3f:61:c8:fb:6d:f3:49:99:2c:55:f7:02:27:b5:
bf:90:f3:d6:08:2c:31:e2:75:4a:39:3c:eb:92:b3:
a1:62:75:b0:c7:b5:5d:36:9f:39:65:92:42:78:75:
56:d2:24:89:81:c8:a4:76:d5:7e:4a:2e:56:71:a9:
a8:a1:38:87:8d:fa:4d:e8:b3:3a:e8:88:85:d6:2d:
48:1b:0c:45:76:3b:e9:b4:ee:02:a7:9a:85:a6:d7:
1d:f2:10:e4:91:06:14:e1:8d:c1:80:d1:6a:7a:dc:
02:ad:87:6a:ae:1f:72:b0:ee:ee:25:50:e2:4b:70:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:C9:16:32:07:CC:B9:FF:B7:8C:A1:F0:57:FB:6D:58:D4:93:65
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:fb:bc:4b:9b:76:f7:dd:01:9c:7c:ab:44:95:a2:4a:b5:
8a:cc:ef:36:bc:9e:fe:f4:cf:5a:c5:45:4d:c7:28:b7:34:c5:
e9:ec:ef:69:cc:b6:ce:40:20:5e:7d:70:95:de:29:da:9a:7e:
49:f3:42:a4:71:6e:84:7f:45:13:f4:b4:55:d1:e8:c0:65:3d:
1a:c3:03:8d:57:c9:b5:e2:bf:5e:33:39:56:0c:6d:2a:d3:15:
7b:4a:f4:34:e1:d1:2f:bf:4b:17:7f:8a:95:49:19:0d:87:d5:
01:38:95:1c:23:06:c5:77:07:aa:24:8a:fe:82:54:f9:d7:79:
e7:6e:58:44:c2:b4:02:db:62:ea:de:e1:08:2c:db:d0:26:0a:
09:94:e8:80:74:6f:b0:4a:65:aa:30:2b:49:09:98:71:39:44:
3a:ad:3c:14:f9:bb:db:fa:94:89:f9:c1:c7:0d:9f:05:09:03:
98:6d:54:7f:67:a3:1d:a1:7d:d2:ba:e0:1a:4b:97:2b:3a:61:
0c:29:17:ce:a8:38:fe:df:51:82:29:32:4f:4b:25:6b:3f:b9:
a1:d8:e0:8d:e7:32:46:43:40:a3:73:25:63:2c:19:33:9a:ec:
c2:06:58:70:5d:ef:0a:79:b1:8f:80:77:d8:8e:00:52:d3:bd:
69:87:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:07 2025 by rpki-client