Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: WtSGeuG4XYLDajW34yMiA5Y5lLF+U18VwlIXS+X6pwc=
Subject key identifier: F9:19:7B:9B:18:80:0A:25:2E:BD:C4:C9:EA:96:73:63:0B:78:B5:0A
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019A4E8683C216CDD58076B7E970730A8CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0FAA
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: /uszrPFEw5txXuJUfaveNtAtyMn3zISJP+i2/hlIHTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:83:c2:16:cd:d5:80:76:b7:e9:70:73:0a:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=f9197b9b18800a252ebdc4c9ea9673630b78b50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:2e:c0:98:d3:1f:02:90:37:83:60:40:d9:
eb:ea:08:c2:b3:98:a9:10:be:a6:ce:82:2d:0b:27:
06:f9:1b:12:3e:90:f3:e0:7d:d0:a0:41:27:e3:18:
2c:ac:22:f2:06:4f:e9:70:dc:6b:4c:41:da:6f:85:
8b:28:b4:e1:d1:73:da:6e:96:8f:7c:40:b8:d0:b2:
ea:b5:d2:ba:7e:26:4d:92:23:ec:8d:7b:9e:54:8c:
0d:3c:b0:55:ad:90:4b:a1:38:93:c3:0c:fc:30:f3:
cf:01:46:fd:3d:8a:91:0a:4c:e2:e7:33:4a:4e:04:
02:ce:86:53:82:4d:72:9a:94:0d:fb:28:f2:ce:1c:
f2:b1:71:3f:7f:86:a2:4e:1d:98:7c:d4:8a:91:5b:
be:1a:03:80:d7:50:9f:78:6d:30:01:2f:c3:3e:93:
fc:00:16:00:89:34:6a:75:f0:91:7b:da:ca:70:bb:
51:00:b8:99:18:5e:74:6a:31:7e:d9:b2:84:0d:03:
be:42:6a:b8:fe:ea:47:40:18:02:d7:eb:29:54:65:
23:1c:25:95:29:93:30:55:49:2a:c8:eb:05:28:c4:
84:9d:14:ab:bf:a0:4f:ab:68:bf:9d:67:a2:a7:43:
4e:a8:b5:78:08:33:c8:17:7f:c5:29:3d:7d:ed:20:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:7B:9B:18:80:0A:25:2E:BD:C4:C9:EA:96:73:63:0B:78:B5:0A
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:c9:0d:1e:01:6f:58:9a:ca:9b:67:1b:56:50:b9:0d:53:
10:2b:f9:62:1b:cd:8d:6f:71:0e:af:60:da:91:4c:98:df:02:
59:c6:9e:88:f8:85:2c:54:41:88:07:9d:fa:bd:6e:30:15:ee:
0d:c2:65:55:1d:1c:a7:26:9f:40:a5:a0:1a:88:e1:a5:b2:da:
71:44:d5:7e:01:f0:30:d3:f2:68:46:84:27:d5:0c:74:a6:f1:
48:f1:3a:ea:e0:9c:2b:d4:73:04:f1:b0:8b:42:df:73:21:00:
f4:5c:fa:db:05:f9:aa:74:ec:74:f3:62:1e:d1:7b:5b:6a:00:
b7:6d:19:22:fe:b2:31:86:d0:1d:9d:d0:9e:19:14:73:4a:ef:
48:85:6e:b8:1a:47:f3:ac:8f:09:49:3d:b9:aa:b2:bd:9a:a3:
ff:3d:89:1d:12:46:b4:c5:95:65:5a:c7:df:41:d9:8b:7b:07:
ac:33:5a:37:9e:4e:28:cd:da:b4:f9:d4:0d:d9:f6:98:fd:60:
70:e8:c7:53:d2:d8:e8:5b:d0:9c:4b:d0:2d:b9:90:06:87:91:
20:83:5b:7a:3f:4b:25:92:08:ed:7c:77:66:82:f0:ac:24:01:
0a:20:32:e3:a5:fe:1f:b8:8c:39:e6:68:81:37:f4:52:e7:26:
cf:15:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:50 2025 by rpki-client