Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: VZ1AJkiHydlHlaMCnVay7hqA8ONKRcVKLWsUTchPFJI=
Subject key identifier: CC:F3:A2:08:1B:6B:4A:78:39:1B:13:BE:12:34:67:8F:5F:01:EB:E0
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019A4EF4DB0EFACBF93CF2C735D0BB63B628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 08B8
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: 2BJYhKV/7Kr8JQi1qOxBbbz75tYeustOZuA/cMceIO0=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:db:0e:fa:cb:f9:3c:f2:c7:35:d0:bb:63:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=ccf3a2081b6b4a78391b13be1234678f5f01ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:68:60:a3:f4:a5:91:aa:0f:48:91:02:25:
75:2c:07:19:93:0d:e4:df:08:9f:0c:d7:8b:a4:46:
a8:e8:55:92:cb:5c:3f:80:ea:07:19:06:20:c7:f4:
95:de:91:4d:32:d0:49:3e:81:ce:34:62:90:24:e0:
8a:61:08:33:3a:fa:8e:0a:1c:ec:04:6f:2c:66:cb:
bc:ca:61:34:d4:35:92:61:1c:e2:d7:08:01:48:3a:
a9:6e:ab:6d:23:ac:67:d0:a8:47:4b:4e:cb:88:90:
ee:f8:4b:3d:68:8f:c4:6d:03:82:05:0c:f2:6b:99:
f9:05:bc:f4:7f:d8:0d:d6:b1:b2:4d:57:36:35:4a:
19:40:26:33:88:1d:b1:e1:5f:a1:05:01:2e:47:3c:
f6:00:ac:e2:34:62:70:95:2a:f3:12:e4:a5:43:35:
1d:dd:0f:3d:3b:6b:45:37:14:de:32:cc:67:b8:be:
82:4e:2a:f7:9c:11:f6:e6:54:f3:a1:20:7d:5d:0c:
96:1c:19:8d:c9:7a:6e:91:73:f0:fe:c6:98:3d:75:
aa:54:19:f0:f1:86:5b:ff:ff:64:af:72:f5:bf:09:
54:6f:9f:13:ee:ec:f3:e3:65:df:c0:27:fc:f8:96:
67:12:03:51:3e:f8:97:f7:c9:0f:93:a0:5d:57:13:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:A2:08:1B:6B:4A:78:39:1B:13:BE:12:34:67:8F:5F:01:EB:E0
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:dd:29:a1:b5:c9:fa:c4:29:d9:72:f6:3f:8d:3b:c8:06:97:
d8:a5:6e:42:a9:78:a2:e8:bd:ee:3a:d2:7a:e1:c4:01:57:6e:
36:9f:92:67:a3:66:33:74:ab:c7:67:eb:1d:6a:3b:8f:8e:62:
a5:c0:ad:62:30:a9:bb:85:e0:f8:f5:60:57:2d:01:f3:23:e7:
ab:9a:28:24:e7:80:9b:1c:96:31:94:a3:42:3b:94:6b:e7:84:
24:d9:c0:a0:de:50:40:e5:b9:0e:83:76:58:6c:a9:ab:6e:b2:
35:f8:f5:68:61:35:60:72:0e:92:a5:c8:e5:41:53:c2:3c:8a:
53:b9:88:25:bd:18:7b:3c:c8:fd:ab:d4:64:60:ba:85:bb:9a:
fa:51:cf:e0:17:a9:2c:eb:e5:49:3f:79:4f:34:d4:b8:73:23:
7d:43:41:c7:61:d7:cc:a3:99:ab:91:09:fc:67:ce:26:c1:44:
2a:a0:1b:8b:61:49:7d:f2:cf:90:f6:3b:ca:a6:0f:2c:d3:c8:
3b:1a:d4:4b:51:04:65:ee:27:7b:f3:44:96:20:63:27:fa:5a:
d9:18:c4:72:13:0d:87:f8:38:3a:b1:bd:43:7e:a0:cb:eb:32:
cc:ce:9c:35:b6:04:08:f6:33:39:1d:93:bc:23:e0:9f:30:89:
e1:c9:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:32 2025 by rpki-client