Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: tb4tr2ssawf1ZbOVX+1FSdOd/Ji/zptEBtVUGBDGB3I=
Subject key identifier: E3:27:CF:47:3F:E9:43:81:D1:60:AA:5C:BF:57:C7:F8:B7:74:88:25
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019A4F9951927FF2A85E2EA3D440089EBE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 0547
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: 5OB/vTuHx71jBud8xWeafIpYSOHTZxlx+5jn81uZzyk=)
2: mpcpZSVPqHluaz87WJ0uN-9FKN0.roa (hash: 7rifYSX6qCoq1SQ259BqQ0Nwhu4OmIky6bHMjTs3HBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:51:92:7f:f2:a8:5e:2e:a3:d4:40:08:9e:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=e327cf473fe94381d160aa5cbf57c7f8b7748825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:a3:36:54:25:2e:02:7a:ff:f5:1f:35:eb:
a5:65:f9:23:f5:02:75:05:e1:ee:0f:8e:96:92:9a:
b4:e3:4f:ec:f8:69:50:d4:d6:e2:a1:89:29:bd:4f:
29:7a:15:48:4c:39:5d:77:51:43:d4:69:88:b7:38:
36:00:42:ef:6d:3a:87:22:e5:98:87:70:23:10:07:
90:19:05:d5:7a:53:1f:f5:5a:f3:25:cf:e5:0c:5c:
ff:b0:8e:01:8e:f3:c0:8a:6e:26:57:7e:45:33:c1:
b4:d9:69:fc:65:c0:1a:fb:a2:38:dd:20:48:92:4c:
92:b6:2d:f0:9f:57:bb:e1:43:e9:b9:fe:46:78:ea:
85:ae:5c:80:45:62:eb:cf:68:4a:2e:a2:4d:93:7f:
81:04:c0:6f:53:7d:29:c3:d6:0b:cc:d9:d6:fc:03:
d1:0d:cf:37:a3:5d:bb:cf:4f:fb:9c:02:58:84:44:
c6:73:6d:4f:fa:d0:85:81:1e:d8:6f:b3:cc:a6:8f:
05:27:36:d7:82:b1:36:56:77:01:e3:55:2f:59:b0:
b2:f1:0e:6c:ca:73:aa:d7:22:dc:f8:3f:2e:38:83:
13:31:ec:27:d7:c2:df:12:a3:04:36:28:59:83:b2:
6b:5b:8d:7f:bc:0e:31:ec:a6:af:17:4f:eb:07:c1:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:CF:47:3F:E9:43:81:D1:60:AA:5C:BF:57:C7:F8:B7:74:88:25
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4a:a5:a5:d8:30:a9:cb:5d:1b:e3:59:9d:2a:9d:62:2e:2e:
3a:80:cc:ed:fd:97:c1:fb:89:76:1c:35:6b:5d:01:22:f9:5e:
a8:8e:52:d0:00:56:89:f7:81:72:33:5f:2e:b3:7e:86:29:df:
8f:dd:f7:f7:87:6a:05:18:ec:63:1c:2c:7a:05:27:a2:b2:38:
12:d6:88:87:07:ef:8f:dd:31:28:44:8b:0c:a5:b7:7c:b3:63:
b2:c2:85:81:48:8e:73:b5:b5:7a:9d:b2:ae:e7:52:07:32:5f:
a0:1d:c7:69:f4:3e:88:0d:49:5d:40:ae:a0:ec:b1:e2:bb:9b:
1e:02:d6:4d:20:62:96:d6:a2:d9:b0:30:35:c3:f5:89:d2:ad:
29:a1:64:c5:7d:ff:2f:77:ec:78:b6:af:97:2e:e9:9b:d7:a6:
71:91:8b:1a:5a:8b:8b:a6:cd:3e:34:2f:60:91:c4:0f:c6:50:
d2:10:be:f7:87:8b:ff:8c:64:40:ca:7a:8d:b4:71:72:01:f3:
b4:0e:e6:c2:2d:ec:6a:a7:20:2a:48:ae:42:68:7d:fb:12:83:
5a:73:a9:ca:e4:9a:93:54:86:c7:d8:c5:d6:d8:b1:94:58:a3:
f7:9f:5b:d2:7a:23:47:b4:f4:55:2a:d6:6b:da:07:4c:f8:ae:
b0:b8:58:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmVGSf/KoXi6j1EAInr4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDVjOWM1OGQ1YTQ5OTliNWRjZTllMDcwZDMyZjQ4OGUz
MzFmNTIwHhcNMjUxMTA0MTYwMDM5WhcNMjUxMTA1MTYwMDM5WjAzMTEwLwYDVQQD
EyhlMzI3Y2Y0NzNmZTk0MzgxZDE2MGFhNWNiZjU3YzdmOGI3NzQ4ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOqjNlQlLgJ6//UfNeulZfkj9QJ1
BeHuD46Wkpq040/s+GlQ1NbioYkpvU8pehVITDldd1FD1GmItzg2AELvbTqHIuWY
h3AjEAeQGQXVelMf9VrzJc/lDFz/sI4BjvPAim4mV35FM8G02Wn8ZcAa+6I43SBI
kkySti3wn1e74UPpuf5GeOqFrlyARWLrz2hKLqJNk3+BBMBvU30pw9YLzNnW/APR
Dc83o127z0/7nAJYhETGc21P+tCFgR7Yb7PMpo8FJzbXgrE2VncB41UvWbCy8Q5s
ynOq1yLc+D8uOIMTMewn18LfEqMENihZg7JrW41/vA4x7KavF0/rB8HmCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMnz0c/6UOB0WCqXL9Xx/i3dIglMB8GA1UdIwQY
MBaAFEZFycWNWkmZtdzp4HDTL0iOMx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2Qt
MjhiZjFkMzNhYTkwLzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2QtMjhiZjFkMzNhYTkw
LzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0qlpdgw
qctdG+NZnSqdYi4uOoDM7f2XwfuJdhw1a10BIvleqI5S0ABWifeBcjNfLrN+hinf
j93394dqBRjsYxwsegUnorI4EtaIhwfvj90xKESLDKW3fLNjssKFgUiOc7W1ep2y
rudSBzJfoB3HafQ+iA1JXUCuoOyx4rubHgLWTSBiltai2bAwNcP1idKtKaFkxX3/
L3fseLavly7pm9emcZGLGlqLi6bNPjQvYJHED8ZQ0hC+94eL/4xkQMp6jbRxcgHz
tA7mwi3saqcgKkiuQmh9+xKDWnOpyuSak1SGx9jF1tixlFij959b0nojR7T0VSrW
a9oHTPiusLhYgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:55 2025 by rpki-client