Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: F+WAm4bE+4E2TiVaEmS+coAwiJg3a9e3IuYlVhPYn3s=
Subject key identifier: 06:B0:EE:9E:64:29:02:B4:1D:5C:C5:23:73:3A:8C:A3:3E:84:11:1B
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019A7112D36390233646E0C1D2C47696C41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: KixthnqAm4HHS4coSuLEApLUExkziDfftaZBfKJdgy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d3:63:90:23:36:46:e0:c1:d2:c4:76:96:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=06b0ee9e642902b41d5cc523733a8ca33e84111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:fe:09:68:9a:20:59:4e:f7:56:61:cf:96:
11:79:dc:ff:99:ba:f8:a0:e3:55:d3:48:23:80:30:
f5:11:ac:4b:04:32:78:77:ce:fc:9f:bf:e5:a5:f1:
79:0a:6b:02:ab:2a:3a:c3:d6:21:d1:4c:5d:de:60:
69:1b:dd:b1:a3:28:fa:6c:19:0f:f2:3f:17:36:f1:
b6:53:75:b4:d7:04:79:64:bf:76:d8:d4:16:2d:fe:
f8:f4:97:bc:0f:cf:63:3c:6c:21:b9:88:6f:ea:e6:
e1:8f:06:05:2b:be:cc:80:e5:b8:c5:65:07:c2:d3:
50:70:7f:cf:0b:a2:55:47:78:17:77:06:88:0e:59:
a9:1d:5f:bc:54:2b:37:d2:db:75:83:b1:ad:1d:df:
02:15:15:a4:9f:79:0d:b2:00:1b:46:f3:19:de:f6:
ad:5e:af:fe:da:f3:b8:d4:c4:04:f5:7f:0e:4e:fe:
14:d3:64:72:eb:b4:c4:cb:94:80:36:f4:6b:b7:d5:
12:45:cb:99:bf:35:16:82:f2:07:41:9b:1d:88:7f:
cd:13:19:39:a3:51:bc:ae:aa:49:fa:62:a4:d5:ea:
2a:cf:d0:25:e3:ec:24:47:3e:eb:f7:35:6a:d6:78:
ef:35:d1:7d:9e:0d:9c:22:09:90:72:fa:1d:4e:17:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:EE:9E:64:29:02:B4:1D:5C:C5:23:73:3A:8C:A3:3E:84:11:1B
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:b5:a0:9f:65:a8:7e:dd:2a:b9:f6:57:fc:aa:c4:71:57:
ed:dd:84:4a:0a:ba:a7:11:78:5f:2c:1c:99:70:4e:16:a8:b0:
e3:ed:8b:c3:ea:e2:d2:93:3a:87:bd:58:bc:7a:2a:97:77:20:
ed:a7:49:b2:47:26:35:09:e2:87:6f:cf:e0:99:a5:09:50:ff:
fd:e8:f1:44:ad:e3:ae:3e:a4:35:f9:a9:8f:7e:c1:6b:41:a1:
d2:a5:f2:fa:91:f2:b1:07:dc:d8:8b:42:e2:e9:19:c6:3e:2e:
2d:9b:98:71:63:d3:68:da:83:63:a0:54:06:d5:45:26:31:4d:
49:65:f0:f4:27:92:69:74:11:b8:e9:fe:13:40:b9:1e:a8:c0:
fc:05:81:6a:80:d4:d4:84:5b:c7:4b:ab:33:99:af:b4:69:40:
08:8f:e6:e2:df:4a:11:4e:cb:c8:f8:79:22:7c:bc:35:0a:54:
a6:85:b2:2b:3e:d4:48:36:7f:00:2b:c3:41:15:79:2a:de:4f:
65:ee:b2:54:7b:60:61:d8:da:08:f0:39:82:04:65:38:c2:18:
1e:07:ec:91:4a:93:fa:c5:89:a7:36:f2:92:9d:62:3c:ac:5d:
6e:bd:6e:30:7f:92:ce:e7:14:92:3d:81:ed:ae:52:b4:06:59:
a7:24:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client