Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: lOAMTMwsjKqyVfNfL0a7I+ifiljFba5PYMY/UUXFwt0=
Subject key identifier: 80:D8:4E:14:5E:46:F0:29:94:03:5E:56:BC:40:4D:85:D2:57:0E:9A
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019A4D05E80CEFA329ABD71F860E99D67718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:23 +0000
Manifest this update: Tue 04 Nov 2025 04:00:23 +0000
Manifest next update: Wed 05 Nov 2025 04:00:23 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: OpGCWD021ER5PEnQXvyZBmfhPcU+tDWUfk9/nKZYd8s=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e8:0c:ef:a3:29:ab:d7:1f:86:0e:99:d6:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Nov 4 04:00:23 2025 GMT
Not After : Nov 5 04:00:23 2025 GMT
Subject: CN=80d84e145e46f02994035e56bc404d85d2570e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:38:62:7a:69:66:6b:37:e3:5e:47:fd:0f:
96:8a:8f:68:95:d2:11:00:fa:c0:95:7c:f5:76:4e:
54:1f:7a:0b:0d:e3:00:a8:b3:9d:0b:63:19:0d:7f:
07:48:14:88:f0:3f:46:aa:7a:40:73:3a:cb:8a:43:
47:df:ad:2f:ad:65:2f:c7:75:57:3f:bb:79:e6:7e:
88:9e:cd:f2:60:64:bd:f5:86:01:62:00:83:26:57:
c6:ea:7a:9c:79:43:25:5b:c1:15:a3:b1:16:e3:f1:
a9:a4:ed:5d:6b:50:87:06:ef:25:4e:76:c9:c2:a1:
ae:ce:30:41:b3:78:34:35:52:e9:0a:64:f2:2e:f9:
ef:e2:bf:77:d3:c5:2c:99:37:bc:d0:66:f6:8f:27:
4d:e2:72:25:20:2a:90:e4:11:29:9f:0f:cb:dc:c1:
41:37:1e:c8:44:89:99:68:b4:38:bd:82:51:9a:c5:
90:0f:29:ed:af:c8:32:4d:39:4a:5c:32:15:47:83:
38:2e:d2:e7:a1:6f:4c:11:72:d3:eb:1a:74:c1:d8:
39:03:10:82:e1:d9:cf:b0:fd:85:bf:3a:a5:63:82:
ad:c0:4e:0b:b8:5b:c8:0b:3c:2d:11:a7:cb:67:95:
6c:db:18:b1:04:17:7d:cc:c4:84:4a:53:31:ad:cc:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:4E:14:5E:46:F0:29:94:03:5E:56:BC:40:4D:85:D2:57:0E:9A
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:d5:47:75:8f:5e:17:f8:92:07:70:91:09:4e:18:e6:16:
be:fe:5d:77:8a:52:6b:ea:88:b9:54:ca:15:52:fa:02:53:89:
39:9a:42:8e:5e:9c:f4:1b:b0:54:45:32:3d:24:80:f8:c4:df:
af:10:7b:f1:ff:23:76:31:95:16:2d:4e:23:94:6e:bd:eb:9d:
c5:81:f8:11:eb:8f:fd:ea:b9:15:67:21:da:6b:35:d6:92:5b:
b5:e1:f3:37:32:46:e7:a0:00:06:da:65:9f:44:71:ec:84:0b:
81:99:55:8a:36:f2:54:82:47:b5:9e:9c:27:72:15:4f:27:82:
aa:8c:24:53:5e:87:58:09:06:fd:b9:8d:15:9a:ef:0f:35:8d:
1f:11:a1:79:15:fa:9f:7b:29:36:47:ac:f0:db:3c:ec:d9:0a:
9d:9f:97:df:c1:48:08:97:18:42:c3:6c:00:b3:8d:41:2c:81:
31:8a:d1:0b:d5:55:1f:ea:6c:af:c1:92:5d:6d:da:c0:0d:03:
84:7a:ae:1e:75:de:23:98:fb:44:90:b1:15:bc:d2:34:2e:2a:
80:16:6c:50:a5:40:d4:a5:41:c2:f6:04:96:db:80:50:33:83:
25:5b:ae:10:20:8e:21:78:c1:fe:bb:3e:8f:43:69:19:3d:65:
9a:ca:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:22 2025 by rpki-client