Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: uTDS4bkOhwHN9cp21bgGOzP6WHsgOYLoft0RWRqTVu0=
Subject key identifier: 3A:81:B3:7D:FE:81:59:20:4E:51:D2:94:C0:34:98:AD:0A:55:1B:AA
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 019A4F98D54AD165EF151BDD85955E332B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 132B
Signing time: Tue 04 Nov 2025 16:00:07 +0000
Manifest this update: Tue 04 Nov 2025 16:00:07 +0000
Manifest next update: Wed 05 Nov 2025 16:00:07 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: 0xGpbdxrtzzhvIIfb0OaamcPjo9CtGA79Vw3ZHYNgVI=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d5:4a:d1:65:ef:15:1b:dd:85:95:5e:33:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Nov 4 16:00:07 2025 GMT
Not After : Nov 5 16:00:07 2025 GMT
Subject: CN=3a81b37dfe8159204e51d294c03498ad0a551baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:1a:ba:09:f1:7f:d6:eb:e0:69:f6:37:88:
fd:1c:82:e3:b5:70:27:1e:78:b5:06:b5:1f:7e:7d:
18:71:91:49:c0:0a:e0:ff:5c:73:ed:a1:62:85:b8:
f0:dd:c3:f4:b7:a4:97:95:fc:38:c2:db:78:ea:2e:
1c:fa:45:b9:a1:00:95:1e:e5:eb:e3:5f:f8:5f:ce:
a4:91:93:ec:11:a3:9f:22:66:f2:04:6a:b5:67:2e:
8b:89:cd:22:47:d9:9a:89:8e:eb:4c:1c:25:89:27:
bd:72:e2:a3:ba:9f:02:07:66:7c:e5:da:c1:68:5b:
67:70:69:d5:72:25:4c:42:1b:97:4a:16:fe:18:2e:
56:88:8d:fc:b2:da:fa:2e:e2:4f:de:73:a9:8a:8b:
fb:da:15:d5:3b:05:ae:27:63:5c:af:b0:18:ba:bc:
8d:6b:ff:49:fa:58:58:fb:e9:a5:2d:0c:3e:54:ea:
49:b4:5f:7a:c3:fb:4c:e5:ee:8c:fe:72:2d:25:ee:
00:a3:ba:33:d4:0a:a3:39:02:31:2c:a1:c4:34:61:
f6:a6:c2:54:26:06:1b:b9:ee:76:cd:68:ca:eb:11:
66:9e:c7:c3:94:ad:6e:c1:35:24:0d:5a:4e:14:d9:
06:92:18:50:0b:93:33:10:b8:d2:6a:a9:ac:74:66:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:B3:7D:FE:81:59:20:4E:51:D2:94:C0:34:98:AD:0A:55:1B:AA
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ed:73:2d:c9:9f:2b:b2:b7:85:f5:d1:3d:dd:ab:f9:55:ab:
1c:b0:ac:78:f2:e3:59:22:1d:40:33:6b:8a:55:33:ff:b1:43:
a4:60:00:a3:a6:18:40:3a:5e:e4:49:56:f8:dc:26:05:bc:77:
bb:66:4d:08:a6:75:45:71:cd:af:1e:82:75:bf:63:a9:ec:15:
71:ad:c5:23:d7:83:e3:cd:1b:86:52:aa:ae:7e:11:48:29:9a:
0f:39:c9:cc:e8:ab:be:71:62:be:ef:86:0e:9b:53:aa:96:15:
d3:3a:54:6c:83:cf:58:aa:94:9c:43:c1:a4:45:4f:ea:2a:e4:
c6:4a:db:c3:07:e7:be:d6:2a:83:33:93:86:b6:58:e1:05:b3:
5a:e4:41:03:ce:c3:5a:75:f0:92:bc:d7:8e:92:25:c1:54:ac:
f6:f7:ad:df:2b:cd:25:42:02:d3:cc:a5:1f:42:f4:9a:dd:0a:
1f:4f:09:dc:f1:88:22:71:fa:c3:ca:1d:a7:87:a0:38:0d:51:
08:4b:46:0d:bf:41:31:cb:05:07:9a:7b:02:79:8e:ab:08:b4:
0d:85:6a:98:73:96:eb:58:0b:5c:77:04:8b:53:0c:29:d5:10:
4a:af:bf:31:01:a6:c7:3d:2c:05:36:95:e0:24:bd:06:e3:b0:
e3:fc:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:54 2025 by rpki-client