Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: rr2EzYiMDgJZAUKVAileDLGlp7LPRV8eJCYol80MQxU=
Subject key identifier: C7:45:28:60:21:8D:4D:42:8A:C0:B4:91:B1:78:24:F8:45:94:92:A6
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 019A70DC8B7C8B5B2DBDA909EBEE6DBAC55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 03DA
Signing time: Tue 11 Nov 2025 03:01:32 +0000
Manifest this update: Tue 11 Nov 2025 03:01:32 +0000
Manifest next update: Wed 12 Nov 2025 03:01:32 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: YncbkvCT/XznQ5iUpQtd0GSv5dx2ZkIbyK6M/po/P40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:8b:7c:8b:5b:2d:bd:a9:09:eb:ee:6d:ba:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Nov 11 03:01:32 2025 GMT
Not After : Nov 12 03:01:32 2025 GMT
Subject: CN=c7452860218d4d428ac0b491b17824f8459492a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:02:8f:81:61:a2:f5:bb:d1:93:c4:46:8d:
f4:01:00:04:ac:a3:48:8f:d5:c3:dd:6c:ef:b1:f8:
a0:e9:2c:fa:d7:26:62:73:cd:52:91:06:a3:b5:bc:
45:89:b8:9f:61:6c:1d:a0:25:5f:2a:64:6d:c4:fa:
c8:fc:91:ef:82:33:2c:bd:bf:78:89:55:b8:d9:0c:
18:07:55:ff:50:6a:1a:95:85:a5:ae:84:6a:26:e2:
65:56:dd:59:58:c0:b9:0d:6e:08:da:c0:5c:f9:e3:
db:1b:54:79:be:e4:46:64:f9:e7:bc:fc:b1:98:6b:
8a:ea:24:ba:fe:8d:94:56:d3:62:74:a9:72:95:0f:
a5:77:c1:24:c3:f6:f3:31:91:cd:e3:34:54:e7:f4:
10:aa:fd:e7:8d:b4:a4:07:0a:0e:05:1a:f2:01:f1:
a8:00:9c:e3:bc:e9:95:f4:c7:01:9b:25:84:a6:e0:
72:13:a2:6d:be:cc:73:e8:75:13:48:b0:a1:fe:4b:
28:53:b9:43:45:9a:c4:b4:4b:df:a0:a3:d5:df:2e:
fc:20:17:ff:4e:1a:06:32:3e:ce:0d:a3:f6:37:d8:
e8:a4:f5:d1:83:38:c4:f2:e6:75:4c:0c:b7:2e:33:
d2:10:0b:7c:2e:0e:28:46:b6:83:22:76:10:90:08:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:28:60:21:8D:4D:42:8A:C0:B4:91:B1:78:24:F8:45:94:92:A6
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:25:bd:2b:2b:66:11:6a:bf:2a:7b:77:1e:98:d7:7b:0d:
d3:f4:13:84:bd:87:05:43:5d:de:18:8d:84:7f:e2:e2:b2:49:
f7:25:0e:25:47:d1:ba:3f:52:ad:6e:34:d5:77:0b:34:f6:ac:
00:ba:2f:6c:0e:3e:79:b9:44:b6:ae:59:8c:b6:1e:a2:23:68:
97:ed:ce:c5:f8:57:ca:22:0d:91:7f:aa:0d:16:b7:7b:24:4d:
21:df:52:f9:09:a7:6f:1c:d6:c3:8e:b6:c9:6d:87:e4:c3:3d:
67:9f:79:43:53:ed:ee:e8:25:c0:c5:2f:48:5b:64:f7:17:f0:
12:f7:83:2e:f9:24:b8:c1:1f:e6:c3:26:67:62:fc:39:a5:29:
2c:d0:87:a4:b3:6c:ef:2c:35:70:ae:30:90:38:ad:07:93:e9:
6e:e8:ef:bf:b4:e1:38:62:29:08:3b:be:54:93:d4:bd:c0:b8:
95:9d:c1:11:ea:7d:eb:b8:e0:90:3e:ba:9f:ab:85:f1:6d:35:
a1:94:03:99:ad:a0:0d:6d:6a:01:19:40:c0:eb:55:3e:6b:0a:
10:03:f9:68:bd:ca:9c:4e:5d:df:98:86:f3:cf:2c:74:e4:07:
97:8f:56:a1:f9:7d:5f:59:2f:89:42:0f:27:fe:6b:e3:bc:54:
1f:db:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:21 2025 by rpki-client