Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: QbU6Hun9+ZMS6ZJoNy7OGCrpba/YiUPRZA3u4p2FVE0=
Subject key identifier: 42:A1:D4:AE:BF:EF:F5:59:8F:AB:AA:B1:CC:C1:0C:71:30:73:B5:18
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 019A4EBD4D824D6333D5679A6785D4289275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 0439
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=)
2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: lGfkHXmgPU+0Bjv9TPGB0vt5zqe2jSiw0araxPNNTaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4d:82:4d:63:33:d5:67:9a:67:85:d4:28:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=42a1d4aebfeff5598fabaab1ccc10c713073b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:bc:0b:7d:8d:f4:ce:0f:f8:6c:f3:52:72:
ba:e3:92:f9:3c:49:ec:8f:40:19:9f:24:ca:6a:bd:
f9:45:89:60:3d:40:34:d6:74:2f:ce:87:98:e5:59:
85:9c:ce:16:74:93:fb:ec:ea:53:66:28:36:38:0b:
f4:28:14:7c:52:89:be:3e:35:45:52:4a:d5:42:a0:
c2:41:99:97:12:a5:f1:4a:c8:a7:cf:94:b1:ea:9f:
62:c0:48:54:36:7d:6b:34:3f:7b:be:b1:5c:9c:a1:
91:a9:8e:9d:e2:03:0c:0e:dd:e1:84:88:2d:f8:b9:
70:70:33:87:5d:b7:74:29:b6:bf:06:d5:5d:ee:12:
cd:ba:03:3d:65:50:bc:89:fa:3b:17:3d:a7:f6:ad:
e4:ed:bb:1a:70:46:a5:d1:44:98:c7:d5:d2:be:26:
57:36:b0:4e:74:4a:9a:4f:ff:e5:1a:8b:66:5d:06:
d0:a4:50:db:56:31:d4:7c:27:c8:53:85:f3:bb:bb:
46:00:c6:f6:af:28:c7:24:54:61:99:e8:73:33:ac:
c5:ec:6b:60:5d:fa:12:a0:10:4a:7d:65:8c:af:05:
42:79:b8:09:c8:cf:9e:32:37:e0:6e:ca:88:fb:bc:
bb:aa:ca:df:d3:ac:c0:e1:4a:00:8d:c5:64:d9:02:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:D4:AE:BF:EF:F5:59:8F:AB:AA:B1:CC:C1:0C:71:30:73:B5:18
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:07:0d:20:f1:8e:a6:59:89:b0:03:ca:9f:29:78:15:7f:14:
21:5f:89:e7:e6:2f:3a:57:5e:a7:cb:1c:ef:08:b5:04:e2:ee:
bb:5d:84:98:e3:3f:20:04:f1:22:ae:a7:07:00:31:17:12:3e:
cd:b5:ff:f5:29:93:d4:27:f6:73:ba:83:85:43:c5:26:17:59:
66:48:2e:de:42:9c:a5:6e:7c:82:91:01:66:7f:9d:e5:00:ae:
dc:2b:22:fa:f9:36:7e:e8:51:da:b5:ad:c0:1b:f7:87:48:76:
dd:f0:7a:b0:4d:bd:61:bc:67:af:08:bc:7b:39:c0:e1:73:78:
2e:f9:a0:6e:5b:a2:39:9e:1c:a0:87:42:c2:6e:01:e2:4f:e0:
68:e9:85:3d:fe:a2:f5:14:c7:e2:71:2d:4f:28:5c:3a:c8:01:
ad:b9:d3:f4:0b:32:ba:9f:78:ed:06:8b:06:17:49:2d:8d:60:
f4:43:9d:5b:e8:04:0a:4c:3d:fc:9a:32:fc:dd:62:4d:64:ac:
f1:53:f1:fa:ea:ba:e1:9e:89:94:3f:b3:37:74:2b:a7:a6:8e:
44:04:86:43:a0:f7:21:8e:c5:b5:14:e0:15:1a:2b:7f:3e:8f:
61:bc:f8:03:df:fd:fa:53:e8:b0:f2:5a:3a:2c:e2:e6:33:e3:
c7:e7:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:19:28 2025 by rpki-client