Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: 34FXgzIDctdhe33zK71hSogurpmZqSrVbcCBLYOHKNg=
Subject key identifier: 58:9E:52:47:41:F6:46:F3:44:4D:E1:69:93:0D:20:F6:E3:FB:E0:F4
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019A4DE1F77096B91BC8E9E7BA4E4D470311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0B12
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=)
2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: I9W2XJd0nCy7MEoXkFhY+caR5dZAPJ1FqeA/exUKMDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:70:96:b9:1b:c8:e9:e7:ba:4e:4d:47:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=589e524741f646f3444de169930d20f6e3fbe0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:b9:85:d4:44:a1:90:83:34:7e:72:95:09:
5e:f1:fa:a5:1c:a1:c5:9a:ba:d8:2c:ed:a0:51:d6:
3e:ae:cb:99:46:c9:a4:fb:af:05:ea:c2:3e:ab:78:
52:21:15:ea:ef:5b:f0:13:03:76:be:48:5f:22:59:
a7:0d:96:4f:8f:aa:0c:41:0c:49:d2:05:56:fa:2a:
2f:ca:ef:91:0b:19:22:3f:e7:6b:f1:b7:d4:8b:3c:
a5:86:59:d4:4c:21:89:59:94:ba:d3:b3:12:83:21:
22:e2:3a:b1:72:00:e0:00:bf:96:39:fd:bc:3a:63:
a7:61:8e:c9:3d:12:b6:76:27:06:d0:43:d8:79:14:
15:86:73:4c:85:76:f6:af:ad:6c:26:d2:b0:25:0a:
8d:f3:2a:27:0e:ad:ca:22:be:8f:eb:0c:6f:57:1d:
64:dd:8b:18:65:32:c0:fe:0f:04:b0:4e:c6:8a:49:
89:3b:1b:78:6e:53:d4:3d:41:87:25:43:9c:78:13:
e4:8e:d7:ab:f1:e7:e9:15:5a:3c:b4:14:34:f6:27:
00:dc:be:ea:bb:93:13:6d:8e:11:0f:27:e7:06:26:
44:de:9b:d3:92:c5:2d:b3:a7:f0:55:1e:e9:ed:79:
f3:e6:32:de:76:6f:5f:3b:d3:9e:c7:1c:c2:91:e2:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:52:47:41:F6:46:F3:44:4D:E1:69:93:0D:20:F6:E3:FB:E0:F4
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:30:0e:60:26:94:2f:55:88:d9:e7:a0:94:5d:ae:22:88:
af:c4:7c:90:61:8c:6b:49:df:86:65:e4:8a:5f:c1:50:bf:97:
58:0c:88:fa:a3:db:67:e7:9b:c0:9e:3e:9d:b8:8e:cf:57:a5:
6e:cf:a1:dd:6b:6e:93:1b:a7:be:9f:51:d9:8e:9b:4a:b6:82:
a4:bf:f1:a0:7d:ca:c8:9a:ef:d6:54:b3:e7:72:68:e7:17:e7:
89:19:c1:8d:ce:ed:ab:2f:cf:44:31:16:34:7d:f0:f9:88:d2:
7f:62:9b:a3:b5:68:7e:52:cd:7f:04:b2:36:77:a6:98:43:08:
00:1f:a4:db:af:51:d0:42:f5:9c:01:b8:fe:be:d4:52:21:0c:
e1:1e:48:4a:d4:3c:48:45:cf:34:8d:14:1e:a7:e2:03:b6:64:
d1:e3:f5:78:5b:65:82:82:21:f3:99:e1:cc:d7:06:09:94:19:
60:64:ab:b7:88:e2:7b:a1:6e:be:af:d5:bf:24:07:4f:eb:9a:
13:11:35:e3:38:1e:eb:26:a1:a4:54:40:96:1a:18:55:96:46:
b0:8e:13:78:d6:cb:70:9b:b7:e0:f9:37:83:f5:eb:ac:20:36:
8a:62:ef:87:1e:ea:1e:2a:f0:07:1f:92:2e:29:52:97:2f:c6:
7b:a9:3f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fdwlrkbyOnnuk5NRwMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz
ODZlOGIwHhcNMjUxMTA0MDgwMDQ1WhcNMjUxMTA1MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg1ODllNTI0NzQxZjY0NmYzNDQ0ZGUxNjk5MzBkMjBmNmUzZmJlMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5O5hdREoZCDNH5ylQle8fqlHKHF
mrrYLO2gUdY+rsuZRsmk+68F6sI+q3hSIRXq71vwEwN2vkhfIlmnDZZPj6oMQQxJ
0gVW+iovyu+RCxkiP+dr8bfUizylhlnUTCGJWZS607MSgyEi4jqxcgDgAL+WOf28
OmOnYY7JPRK2dicG0EPYeRQVhnNMhXb2r61sJtKwJQqN8yonDq3KIr6P6wxvVx1k
3YsYZTLA/g8EsE7GikmJOxt4blPUPUGHJUOceBPkjter8efpFVo8tBQ09icA3L7q
u5MTbY4RDyfnBiZE3pvTksUts6fwVR7p7Xnz5jLedm9fO9OexxzCkeIRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFieUkdB9kbzRE3haZMNIPbj++D0MB8GA1UdIwQY
MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt
YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2
LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcScwDmAm
lC9ViNnnoJRdriKIr8R8kGGMa0nfhmXkil/BUL+XWAyI+qPbZ+ebwJ4+nbiOz1el
bs+h3Wtukxunvp9R2Y6bSraCpL/xoH3KyJrv1lSz53Jo5xfniRnBjc7tqy/PRDEW
NH3w+YjSf2Kbo7VoflLNfwSyNnemmEMIAB+k269R0EL1nAG4/r7UUiEM4R5IStQ8
SEXPNI0UHqfiA7Zk0eP1eFtlgoIh85nhzNcGCZQZYGSrt4jie6Fuvq/VvyQHT+ua
ExE14zge6yahpFRAlhoYVZZGsI4TeNbLcJu34Pk3g/XrrCA2imLvhx7qHirwBx+S
LilSly/Ge6k/6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:12 2025 by rpki-client