Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier: nTD3lpvIyqZsGz5VHUJu83r/KzyxBeyzP5/bv3VyTJU=
Subject key identifier: FA:67:3C:A7:AD:F9:2C:92:F4:B5:28:BF:01:99:B4:7B:D2:38:3D:46
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 019A71B8219C8DED48FAD8DFC8731DDC45D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number: 04E7
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: 4SihqFqGwZKNVDYMYy/6Z1KJF/DubZ8nyJFT6bzoSmA=)
2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:9c:8d:ed:48:fa:d8:df:c8:73:1d:dc:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=fa673ca7adf92c92f4b528bf0199b47bd2383d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:19:63:1c:fe:07:e5:e2:55:be:65:56:3a:28:
d8:48:7d:74:67:a2:5a:e9:5f:06:02:4c:8a:ae:c1:
9a:ac:d3:0e:58:c9:02:60:b9:f0:6b:31:49:92:47:
5d:a9:3f:55:ec:9e:b0:57:5a:b7:02:f3:86:dd:d8:
bf:f7:0d:0d:5e:12:7d:ca:32:55:b7:ff:ba:c9:3c:
fb:08:cb:34:51:89:c2:e0:52:03:58:1d:a4:80:1a:
6a:10:a3:f7:25:e1:32:28:75:0e:d0:5f:40:03:f8:
78:3f:b6:3a:4e:5c:96:5f:e6:73:b8:4b:65:6d:d6:
39:96:ff:03:06:3e:a0:0e:95:8a:f4:fa:09:c1:0c:
0e:c6:1b:2c:ea:58:9c:57:e6:d3:50:0d:e9:e1:45:
8c:b1:88:8d:93:9f:d8:80:3c:89:d6:e4:a7:7a:2b:
95:e7:75:0d:3a:50:a6:0b:ba:2f:d0:e9:4b:88:f3:
0f:06:76:6c:3b:89:6e:a1:d3:9e:11:b5:ee:1f:21:
f2:eb:0d:dc:31:7c:dd:c8:53:d2:6d:8f:67:eb:25:
ea:04:d7:c9:ee:83:a5:cc:e8:7f:d0:1d:49:72:d2:
51:29:3d:fa:b5:39:81:c6:88:be:a4:3e:fa:01:fb:
f6:dc:20:6c:c3:2a:cb:e0:ba:4d:25:14:10:94:f3:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:3C:A7:AD:F9:2C:92:F4:B5:28:BF:01:99:B4:7B:D2:38:3D:46
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e6:f7:12:3e:8d:1b:0f:38:36:b4:e2:dc:7f:8b:64:a6:65:
24:18:19:04:bf:58:ec:c5:cc:3f:7b:51:ef:09:16:2d:b5:f2:
43:64:38:33:b0:34:30:a9:1e:14:2b:aa:f6:11:d3:8c:a6:3d:
27:73:14:6c:f7:7c:6a:d6:df:8d:f9:a3:ed:da:56:c8:a0:47:
11:fe:1a:9a:71:69:29:22:12:26:89:3d:b6:b2:db:7e:5c:be:
30:cb:ce:f7:08:09:5f:b1:fd:80:d9:14:cb:36:1d:05:1d:c5:
3c:7e:2f:74:fc:32:59:27:2a:b1:de:07:0b:0d:32:2d:6e:d5:
48:77:57:86:97:d0:1b:31:16:c6:84:29:cd:5e:3f:5d:8e:18:
cb:89:8d:62:f2:9e:92:d3:90:43:f0:04:71:62:6a:42:28:6c:
af:fb:f8:e7:cb:2b:7e:96:24:44:08:9b:a1:f8:34:7d:83:2f:
7f:93:0a:1d:29:69:f0:89:8c:fc:a3:8a:28:a7:51:31:1d:1e:
cc:6b:83:96:18:15:39:b1:e2:5f:66:60:ca:43:a2:7f:f4:27:
68:64:22:a5:a2:98:8a:08:95:89:4f:6a:3a:c7:5e:bc:fc:f3:
20:27:08:27:65:08:05:bc:84:38:61:36:12:d1:f1:9e:dd:d1:
c2:8a:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client