Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
File: g_rANRxoqaHdZA2oY9hnrYX3ipE.mft (raw, json)
Hash identifier: 4tG/r+EWP2tva1ByZ5khPTuqHl9xv+gbgoFUU71ws7M=
Subject key identifier: 5B:B3:D7:F1:41:93:2E:36:F3:33:2E:FA:09:84:A2:44:34:33:22:CF
Authority key identifier: 83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
Certificate issuer: /CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Certificate serial: 019A4C2A80FB2E8D5F8DADA8DE6855017483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
Manifest number: 4A
Signing time: Tue 04 Nov 2025 00:00:45 +0000
Manifest this update: Tue 04 Nov 2025 00:00:45 +0000
Manifest next update: Wed 05 Nov 2025 00:00:45 +0000
Files and hashes: 1: Ifp7fQ7mKS2UADFnL-dEcvfRDTE.roa (hash: zAV7cpAaiTXY8jJp2Gcf8CxnC05s7OAa7rmlAr6seaI=)
2: g_rANRxoqaHdZA2oY9hnrYX3ipE.crl (hash: xryziVMw+WdWv4mNz6fjBvMHqQ2qtIqZEpPMxr3kKX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:80:fb:2e:8d:5f:8d:ad:a8:de:68:55:01:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fac0351c68a9a1dd640da863d867ad85f78a91
Validity
Not Before: Nov 4 00:00:45 2025 GMT
Not After : Nov 5 00:00:45 2025 GMT
Subject: CN=5bb3d7f141932e36f3332efa0984a244343322cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:a3:09:5b:ee:bc:52:3b:1c:72:44:34:e6:
08:a6:01:b4:90:ab:02:49:23:8f:e4:04:6f:64:ab:
4a:bb:c2:80:54:30:6e:3b:93:a6:f3:86:d5:7e:dd:
37:70:39:18:de:47:1e:2c:2b:21:bf:ea:f4:80:27:
9a:db:03:68:1e:b9:d2:fb:cd:db:66:96:c6:8b:d3:
00:2c:34:b9:3e:42:14:7f:c9:04:87:b1:ca:79:18:
90:a1:f6:bd:53:af:5f:fd:de:c2:d3:a6:4a:52:08:
9d:97:1c:94:19:63:e1:54:86:f3:69:5d:02:66:0d:
ce:16:94:d0:5d:56:aa:18:ce:81:ff:59:1d:88:fe:
9b:42:79:29:9a:bd:6b:96:67:1f:38:46:b0:ca:48:
b2:3e:7d:99:bb:cd:81:bd:af:b7:db:df:c9:cc:9a:
a4:c6:fb:27:c8:b7:e1:df:40:e3:2b:14:20:fc:46:
88:97:18:be:46:86:62:0f:d7:78:fc:9b:d0:0a:41:
3d:b7:73:67:2f:fd:4e:e8:8f:aa:1a:af:48:d9:54:
c7:19:a3:9e:9a:d7:41:b8:ee:1b:d5:92:a6:ec:90:
2d:89:39:38:48:68:14:1b:93:f9:16:3c:19:be:c4:
07:9d:60:3f:07:f8:be:5d:df:eb:ed:2f:a2:65:95:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:D7:F1:41:93:2E:36:F3:33:2E:FA:09:84:A2:44:34:33:22:CF
X509v3 Authority Key Identifier:
keyid:83:FA:C0:35:1C:68:A9:A1:DD:64:0D:A8:63:D8:67:AD:85:F7:8A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_rANRxoqaHdZA2oY9hnrYX3ipE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c72cf7-357b-4fc7-9f61-dff7e6348fff/1/g_rANRxoqaHdZA2oY9hnrYX3ipE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e3:a2:3d:e3:86:57:56:16:a0:c2:5b:ab:17:cb:e6:89:4f:
78:c2:37:50:54:c1:cd:0c:ea:cc:4f:fc:12:96:10:8f:42:15:
2f:9d:cb:a3:03:27:40:5b:ca:23:7d:02:8d:24:e9:48:fa:a3:
78:b2:1c:1e:db:65:94:1f:a0:88:94:e8:ab:16:46:99:8d:a3:
38:a0:e4:87:ba:29:38:6d:eb:7f:6c:8a:77:5a:ad:32:5e:38:
e8:2b:80:a9:0e:ad:e8:af:2b:7a:75:5c:39:b1:c0:13:fe:ae:
c2:3d:92:d2:7d:72:54:16:a9:fd:4c:19:0f:93:27:ec:44:a5:
dd:fd:98:8f:2a:05:74:61:34:f2:3a:65:9d:51:1d:e8:8c:bf:
6d:6d:24:01:48:d0:28:6e:c1:65:d7:49:95:9d:68:1d:c7:c4:
e5:1f:d7:bc:30:13:e4:4d:de:d9:63:37:00:cd:05:ca:68:37:
d3:d7:cf:4d:bc:60:3e:36:54:9d:1b:b9:37:87:b5:f6:2d:ab:
0e:67:0e:ff:ea:89:43:ac:d3:06:b1:02:3b:6a:65:e4:ed:e8:
3a:5c:87:85:0f:32:31:be:db:02:4a:58:de:80:fb:5c:71:8d:
48:87:96:f3:53:2d:e6:86:a6:78:60:62:64:c6:f7:96:a2:08:
28:f7:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:43:33 2025 by rpki-client