Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: yFqgAe2SnYmOplasAywtueeQJGCB/toVCxnyC9OLhL0=
Subject key identifier: C4:EA:F9:31:B3:D6:A6:49:DB:F1:8E:CE:45:E5:BA:41:F9:DE:34:35
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019A4E1915210E70C7A17E3C7E4B73DF86A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 1531
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: Aj3bCTsbFrtprS6azXzC/u80eQq2fffmjaL9AIb5FzI=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:21:0e:70:c7:a1:7e:3c:7e:4b:73:df:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=c4eaf931b3d6a649dbf18ece45e5ba41f9de3435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:47:e8:74:ad:ee:27:bb:20:75:53:d7:f3:
a4:4e:93:bd:d5:41:d7:77:74:71:ff:58:3e:f1:6f:
cc:e4:ea:66:dd:5e:fe:c9:c9:62:78:d5:19:2d:05:
31:59:13:2c:58:45:b6:a7:3a:13:c2:2a:c9:ea:87:
80:36:b2:7e:f2:c2:b2:6b:1a:bd:9c:2a:e5:96:f6:
92:d2:68:83:0b:d3:79:42:70:af:b0:dc:35:99:dc:
b1:0a:5c:9c:14:d6:44:f1:ca:6a:9b:eb:d2:08:88:
48:8c:95:23:69:c1:69:89:f4:08:0c:a2:f0:4c:94:
bf:76:11:9e:6b:08:ed:49:db:4c:6c:82:8c:ed:75:
78:bc:5b:e6:75:c1:66:b8:64:70:c1:e2:fe:05:52:
ff:c9:9a:df:86:41:1e:73:87:d8:71:53:10:92:2f:
33:5e:a3:44:8e:21:20:ff:8a:31:fd:dc:7b:77:b5:
ff:e7:f3:03:87:5d:78:3f:18:10:23:b5:ef:10:3b:
39:48:76:91:24:00:a9:cb:61:8a:b7:84:9d:f0:6c:
69:dc:7b:6d:54:8e:e5:5a:cd:64:ec:be:90:7f:9f:
07:4c:1c:38:fc:89:41:59:96:80:53:85:c9:df:b8:
50:91:19:2a:5e:23:54:6a:d0:d4:38:65:07:f5:e0:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:F9:31:B3:D6:A6:49:DB:F1:8E:CE:45:E5:BA:41:F9:DE:34:35
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:2e:9b:b0:28:31:28:83:75:4e:5e:12:8a:49:0a:a5:f9:
22:d6:1e:97:63:dd:66:51:34:df:ed:1c:e9:57:14:c4:9f:53:
12:59:b9:7d:de:26:33:3b:73:b2:e0:b7:f2:45:ee:71:79:de:
65:0c:30:cb:3d:85:ac:0f:f0:93:2b:4e:b2:b0:ce:11:24:1b:
9f:97:57:f8:d3:cb:b3:93:5b:a6:58:03:5f:95:d4:29:06:1c:
94:fc:c9:f1:10:7e:38:18:8d:30:5a:bc:98:12:bd:ed:2e:fc:
1c:8d:cf:f2:73:87:e9:34:8e:61:2b:df:aa:82:c4:9a:3c:4a:
e7:67:e3:50:1e:46:69:3b:3a:15:47:ed:ac:d5:98:1a:2c:60:
16:01:e7:6c:1d:0a:2a:61:f9:b1:97:fd:b4:36:74:0b:19:38:
2d:0b:80:b9:46:c6:a9:43:ba:ae:72:ec:ba:ce:68:df:44:b4:
ae:a1:bc:6d:62:b3:d6:82:b9:84:18:e3:5d:5d:bf:68:9f:e1:
10:21:43:5b:bb:d2:07:2b:0e:cf:2f:50:c7:35:c2:05:62:ad:
41:4a:bd:3d:d0:d1:cf:07:fd:fd:f0:17:de:d9:eb:7b:fc:c8:
6c:c5:e4:75:b9:fa:ba:6e:cb:67:06:1c:ee:c5:2d:fc:38:a7:
7e:ab:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:14 2025 by rpki-client