Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier: XnOkL/fqb9l/QJT5REsMzgzRIuygwy+fhpPh15lz6vQ=
Subject key identifier: 58:0D:8A:08:9B:E5:27:71:85:69:EE:DE:A3:D2:E0:E7:04:3F:2D:54
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019A4E4FE6E2F09C4519B54CCCA5A2C9993B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 10:00:50 +0000
Manifest this update: Tue 04 Nov 2025 10:00:50 +0000
Manifest next update: Wed 05 Nov 2025 10:00:50 +0000
Files and hashes: 1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=)
2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: gFMfFDWeohKjIzZle+boJcugwWnIIHI5iiNXZY5JxIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e6:e2:f0:9c:45:19:b5:4c:cc:a5:a2:c9:99:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Nov 4 10:00:50 2025 GMT
Not After : Nov 5 10:00:50 2025 GMT
Subject: CN=580d8a089be527718569eedea3d2e0e7043f2d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:c6:60:4c:22:2f:e8:b4:ea:97:b3:83:fc:
78:bf:aa:9b:69:1b:cd:65:57:dd:4f:90:93:6f:db:
48:e4:34:ff:6c:42:86:73:e5:95:e6:0c:6a:63:0e:
4b:76:8e:c2:4f:b6:39:07:56:5c:3d:08:bc:4c:83:
b4:c5:1f:f9:f3:8b:01:6c:7a:4b:f5:bf:80:f4:a2:
26:dd:2a:7a:08:a4:2d:ec:ea:0e:62:18:7e:08:14:
11:18:cd:ff:89:81:63:63:0b:61:87:e8:31:b4:41:
16:a3:45:1e:88:7d:6e:cc:34:38:45:54:0d:45:da:
fc:12:74:c3:ce:4f:fc:bf:4c:5f:89:5b:59:cd:cb:
8d:f6:30:f1:39:4c:f0:5b:ef:62:2e:92:a6:48:74:
33:e2:a1:8f:1a:7a:10:31:e7:d0:5f:71:ec:d4:52:
b6:01:34:c7:96:6f:ca:03:f4:23:50:38:75:af:0b:
78:a8:e4:aa:40:22:fe:92:9c:46:f0:5f:b6:3a:58:
21:44:d5:22:cc:24:13:03:b5:c0:12:4b:e8:e5:2b:
d4:2f:cf:3d:6f:e2:5a:38:05:2a:06:d5:6c:56:db:
c9:3b:61:34:ff:1b:81:f5:49:2f:b7:e9:79:61:1c:
44:1c:e4:f5:09:d7:5a:f6:79:63:71:15:d0:de:39:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0D:8A:08:9B:E5:27:71:85:69:EE:DE:A3:D2:E0:E7:04:3F:2D:54
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:60:e2:40:43:1c:00:90:2a:0e:0f:ee:82:a4:b1:e5:a9:
5e:4c:6e:3f:19:3f:3c:95:bc:c9:a1:51:3f:39:0e:a8:54:cd:
1d:52:55:69:8d:b6:5d:7d:ec:c4:20:47:c8:0c:fb:dc:e5:3d:
7b:f5:f7:39:88:f7:95:5f:89:f2:f0:71:03:ff:dc:a7:60:c5:
4b:35:b9:16:12:7b:ae:db:92:65:3f:85:2c:ff:44:25:e1:69:
ba:cd:10:f9:8c:ea:0a:1e:61:cc:56:e6:a5:61:72:7d:28:74:
e8:0c:ca:cc:fc:dc:3e:b3:a9:ea:91:b2:6a:34:b5:fe:53:38:
60:c2:aa:2f:cf:91:8a:90:12:50:20:b3:07:3c:67:9a:3a:00:
57:90:26:ab:2a:99:af:ec:40:e0:fa:66:f8:d6:20:27:73:a1:
17:89:82:e2:f2:5d:4d:43:72:b8:e4:6d:43:83:6c:f7:f7:62:
eb:91:7c:43:8d:7a:d0:20:00:0b:f6:4d:9f:24:6f:2c:1a:f0:
f2:8d:c5:18:b8:24:d0:d5:9b:e9:25:d1:0f:18:3d:38:8d:46:
30:74:a1:4d:44:2b:b1:c1:8c:61:33:5e:6e:af:5b:b4:f8:5f:
4e:f1:d2:94:71:08:4c:7a:17:c1:ee:3e:bf:b2:6e:b2:b6:9f:
d7:18:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:02 2025 by rpki-client