Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: 6nnRq1dEIb0ZUy6f259xW3hxb/iY3d916mbMumBLQ/s=
Subject key identifier: E0:6C:7A:BB:14:82:6C:47:D9:47:7C:F6:0A:24:3F:CA:6B:5D:25:76
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019A71EE9E5B3265093DE18B13AE19E69238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: JfVk7UCvMDulnpANf3CZMQM2ar3YhJ6cc3kv497AaRM=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9e:5b:32:65:09:3d:e1:8b:13:ae:19:e6:92:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=e06c7abb14826c47d9477cf60a243fca6b5d2576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:6f:91:86:b2:71:06:b1:24:6c:80:60:71:
29:c1:cf:3f:5b:f5:0f:71:61:55:74:dc:78:fb:b6:
a8:9e:6c:1a:d7:a7:be:4a:83:a7:94:57:9d:7a:f9:
c9:55:cc:06:16:bb:e6:3d:f9:17:7b:c8:9d:0a:03:
10:62:33:96:d6:ed:55:7d:06:7c:42:9e:6f:e2:43:
a8:63:6e:56:57:11:f5:f8:bc:9f:8c:d6:e5:22:d1:
fe:b6:97:b3:66:e3:d8:c2:b4:10:41:56:c2:3d:38:
08:fa:1f:5d:4b:26:59:62:b9:be:e8:e2:cc:b2:e4:
45:1a:d2:78:63:82:8d:b1:c4:39:a7:35:cd:4f:d2:
94:b7:f8:2a:87:9b:84:f8:24:62:50:fe:ff:b7:b0:
53:cb:9e:23:f6:bc:b3:34:93:dd:0b:22:6d:1b:58:
fb:db:cf:6e:85:61:9d:9a:8c:5f:4a:99:d2:b8:b5:
5a:a8:c5:86:e5:8f:03:59:5d:5f:e1:66:da:19:d8:
95:71:5f:c8:a4:0d:e2:93:53:a3:99:e9:76:4c:c2:
65:4f:cb:90:2b:c1:09:df:76:fc:df:d0:f4:5e:47:
a1:89:1b:f5:a0:59:db:ab:9d:3b:fc:8f:7f:c6:b2:
38:8c:1c:4b:ae:87:e0:c4:cd:34:04:e9:70:55:b6:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:7A:BB:14:82:6C:47:D9:47:7C:F6:0A:24:3F:CA:6B:5D:25:76
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:17:c8:83:75:4c:a1:94:9b:41:2c:98:e6:e4:01:f3:42:
a9:0f:21:98:4c:59:df:e9:37:db:e4:ae:a6:15:01:3f:94:9a:
43:be:57:76:9c:cd:2c:e6:c8:01:9b:7a:1f:8f:d0:cb:bd:bb:
14:b1:6a:b9:5e:51:c4:af:67:9a:9c:b9:45:2e:f8:f3:42:3e:
89:60:09:31:24:8c:27:be:fd:f2:c9:ca:9d:88:d5:f3:9c:79:
94:07:af:85:fc:cf:fc:6d:a9:88:61:07:98:5e:e3:59:47:7d:
68:ee:b9:a5:a5:0e:ba:b6:c1:a3:79:fc:1a:ac:7b:70:2c:06:
b3:b7:bc:40:bc:22:c5:7f:f2:3e:ee:bf:52:3d:1d:c1:68:9c:
e2:fb:73:ba:bb:b2:02:53:79:50:ea:02:01:0b:1a:c1:0a:d4:
d9:d8:aa:70:c4:59:ac:61:4f:54:43:6d:d8:bc:7b:7e:a1:eb:
8c:0a:67:6d:a9:a1:1f:fe:eb:1d:c0:b8:2e:25:8f:2c:cb:0f:
2c:48:a7:4f:eb:d1:c3:de:5f:f8:e4:dc:f8:cc:89:80:3d:34:
74:82:e2:2e:ac:7f:1a:0b:4a:4f:30:cd:cf:87:36:35:98:1b:
f0:b8:30:11:64:62:97:60:51:3c:60:d2:6e:ca:bd:0a:3d:e0:
cf:8a:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:15 2025 by rpki-client