Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: /an4pLvvB1vE1SZzx0ANEfI85bD2QHWLLVc8YPE6QrQ=
Subject key identifier: BA:1E:69:16:34:56:2C:E6:60:73:66:AD:89:28:8C:C2:37:6F:0D:56
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019A4DAAF185F1D9909DFAED901677D4EB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0A9F
Signing time: Tue 04 Nov 2025 07:00:39 +0000
Manifest this update: Tue 04 Nov 2025 07:00:39 +0000
Manifest next update: Wed 05 Nov 2025 07:00:39 +0000
Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: RwY4ywJhABiF8m0BWnmC/l9J9c4a+DTA0sqYjhwTXnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f1:85:f1:d9:90:9d:fa:ed:90:16:77:d4:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Nov 4 07:00:39 2025 GMT
Not After : Nov 5 07:00:39 2025 GMT
Subject: CN=ba1e691634562ce6607366ad89288cc2376f0d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:f2:55:5d:c9:b5:14:4f:bc:cb:0c:a6:44:
d1:1c:91:61:f3:b4:a0:b9:bc:ce:79:56:f0:bd:ce:
1c:11:ad:1e:ca:f6:57:be:0b:2e:5e:bb:86:44:87:
25:22:22:00:77:71:68:66:22:18:80:de:d2:26:6f:
9b:8b:e9:39:da:46:98:30:72:b5:00:98:a7:cf:bf:
06:c0:ec:05:8e:4a:af:1f:15:50:8c:84:ee:45:65:
79:c3:9f:bd:92:26:5e:1b:d5:0d:1c:98:06:2b:bc:
60:df:58:fa:27:fc:68:8f:7e:dc:a4:79:2f:e0:56:
98:ef:0f:ea:56:b3:97:c7:2e:c5:f5:48:bc:73:fa:
f7:b0:6b:06:98:a4:1b:02:70:06:56:ec:a1:95:c1:
98:aa:97:22:4f:c8:fa:4b:06:64:86:56:fb:ad:75:
94:51:c7:5d:48:8c:f0:29:df:ff:fd:15:5e:3a:03:
33:4a:ca:ff:3e:94:d0:4f:0c:b8:e4:cc:0d:0d:34:
7c:07:04:85:e0:a6:61:52:24:1f:36:f7:75:9a:97:
08:ac:85:13:99:60:18:82:de:64:f9:a9:45:2b:3e:
b5:d6:d3:a4:44:95:7a:88:0a:44:78:1e:3a:56:d5:
00:47:e3:96:ca:0f:78:5a:46:a9:97:de:f3:7e:c9:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:69:16:34:56:2C:E6:60:73:66:AD:89:28:8C:C2:37:6F:0D:56
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:02:d7:c1:07:64:23:1c:82:04:d9:43:87:c5:ce:9d:63:
be:76:4f:58:a3:2f:48:56:f9:6d:82:d4:0f:15:94:29:c6:4c:
73:13:fe:3e:5b:5c:f3:43:67:ea:13:2c:12:9d:3d:d7:ab:c8:
8b:88:17:ff:15:8b:23:48:e7:6f:f9:f3:ff:37:aa:86:06:d9:
05:2a:2f:dc:8d:a6:69:67:cd:7f:94:36:75:de:32:70:45:1b:
21:1c:a4:35:9f:0e:01:a7:a4:b0:1f:8c:43:66:f3:75:51:9b:
3f:d7:45:19:89:ea:cd:1c:7e:9f:1d:4d:ca:46:4c:7f:5e:62:
d2:00:f2:0a:e0:dc:88:a8:41:10:0f:52:f8:6d:29:17:31:f3:
e1:f3:ad:b3:af:1a:d0:0f:05:b9:5c:c1:ec:43:80:5b:12:53:
59:2a:03:f4:21:9a:63:87:a5:c9:35:be:e1:65:1b:26:47:9e:
ae:59:94:73:52:86:ff:4d:58:b0:1c:75:85:2b:b9:6d:56:fa:
80:68:df:3c:23:54:ce:40:01:22:8f:6e:20:5d:a1:9e:5a:4e:
9e:1e:e2:4c:74:f2:fc:20:42:c0:bb:72:56:2a:47:84:42:90:
b3:dc:5e:99:41:74:51:8b:a0:9f:3d:78:ea:af:c5:ba:b2:12:
b5:e3:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:46 2025 by rpki-client