Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: iu5gp/uuN8HN7x1xgTVkeQHTasc6O8kxW9QPscuODxw=
Subject key identifier: C5:17:F5:BA:60:A7:DF:F1:38:27:08:F0:74:32:76:CC:42:99:E7:46
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019A4DE22F98EE17314B41B941CD849E9A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 1777
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: 2I1GOWHl_sNg202ZkVSHIZVcDhI.roa (hash: hTizmDrUVZJ/qWZQ7WDFRMG/AOudB/C+8jSAoVtPrlA=)
2: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: EHu1RF8Foxq4aFs38pppQ5TlW73zNgS80/wTiErrBL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2f:98:ee:17:31:4b:41:b9:41:cd:84:9e:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=c517f5ba60a7dff1382708f0743276cc4299e746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:e8:af:77:09:83:84:aa:f5:8d:1f:ac:8a:
d9:ac:64:61:ce:64:b7:ce:b6:97:fe:f7:0e:41:e0:
06:ba:f1:ef:5f:0d:3e:ef:ff:2e:db:96:6c:fb:68:
3b:c7:b2:f5:51:20:46:3d:7e:1b:74:51:6b:92:39:
4a:66:76:4a:a3:c1:5b:42:a3:fb:4b:13:7a:5e:c5:
4a:6f:c1:f3:73:bb:10:53:16:d6:5e:7d:c2:3f:2b:
d0:de:73:e4:ed:4b:c9:9f:7f:2f:cf:21:0e:bd:c9:
a1:f2:56:9c:40:43:45:2e:c3:e5:86:46:67:a2:93:
d3:30:1b:fc:87:75:1e:2d:f0:fc:d8:d4:28:23:48:
33:34:16:db:a6:93:62:26:b3:7a:ed:fd:96:31:13:
3b:bb:49:6b:42:b0:bf:a1:28:78:e2:de:f7:1a:d7:
25:4c:64:45:ee:40:e5:10:7e:46:b2:48:5d:9b:59:
aa:3a:8e:8e:5f:9e:06:6b:35:d6:06:95:e8:53:6c:
72:51:48:a2:dc:34:e6:c9:70:aa:05:12:7e:de:06:
db:7c:07:de:08:53:23:44:03:9f:09:23:c0:dc:1f:
21:4a:30:c6:9b:cc:bd:e2:96:31:33:1a:9e:b0:64:
94:d6:7e:ae:c9:aa:a9:c3:d1:63:d8:df:a4:10:3e:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:F5:BA:60:A7:DF:F1:38:27:08:F0:74:32:76:CC:42:99:E7:46
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:41:35:e4:b8:6e:c5:b8:12:be:53:33:fd:79:bb:b2:e2:b8:
ef:1d:67:c3:a4:bc:bd:ea:63:63:05:96:79:aa:1c:83:d0:90:
3e:25:3e:95:01:b7:17:84:61:80:b0:7b:ae:8c:6f:d0:f3:72:
a6:5d:61:cd:d6:f5:19:9b:ab:2c:d7:db:22:2e:73:d0:cc:35:
3b:02:24:c1:b9:19:b7:6c:86:2f:1e:ae:e4:c5:76:2b:57:96:
1b:89:33:e5:0c:8b:43:96:17:50:df:c1:57:41:b1:c0:02:26:
75:b2:8f:7d:57:a7:85:6a:67:39:5b:af:8a:90:0d:92:c4:27:
79:76:1d:a4:90:42:d2:e4:30:fc:89:f2:5b:52:45:d2:b6:82:
4d:85:bf:64:f9:ed:9b:c3:d9:03:88:cd:30:49:ea:4a:33:68:
42:80:47:31:f5:ef:c5:cd:82:1b:71:44:49:2f:29:ca:a0:e5:
b0:93:14:31:32:82:80:5f:d2:e1:3c:87:da:48:28:e2:5c:94:
68:19:b2:f1:16:27:c7:74:c0:85:f1:99:b1:17:d7:e7:62:aa:
8b:9f:f5:5f:ba:90:cd:4a:4b:4f:3f:ed:70:52:5c:27:7d:3a:
bd:d8:29:b5:19:92:23:1f:3b:74:2b:ae:8d:92:ff:e7:e2:9b:
ef:9f:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:45 2025 by rpki-client