Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: gc+PY3DgXAEfZMDuwRhIUT+DtDltWXIwa6Jc/GiGkvQ=
Subject key identifier: D7:F1:EA:4F:9A:AF:A1:5C:8F:78:9F:93:FB:BB:F8:26:81:56:65:2D
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 019A729394AA4DF8F28322B46939806A22B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: HC4ezO8d1s9RbOwso6XK87+QhDTroed5fScrJvi+q84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:94:aa:4d:f8:f2:83:22:b4:69:39:80:6a:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=d7f1ea4f9aafa15c8f789f93fbbbf8268156652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:fc:54:4e:01:e4:d7:03:f9:1d:ab:2d:4e:
da:f7:6a:d6:b8:94:b7:4c:7f:7a:ab:cd:6c:8f:b6:
6c:5d:c3:b0:42:df:72:69:76:4c:c5:db:53:6c:eb:
0e:5b:ff:81:ca:1e:f7:d8:a7:51:f5:d7:95:ec:f7:
74:2a:8a:4c:fd:0c:93:16:f6:15:24:b6:d2:37:f3:
bc:69:c4:17:d8:3f:dc:4a:c7:8d:4a:ca:e9:04:c6:
d5:eb:b5:b6:e9:3c:d7:2b:58:47:12:5c:0a:3c:24:
a4:43:68:39:d9:92:11:07:90:7a:3e:5e:fa:75:95:
27:78:fe:f6:4a:72:a9:f0:bf:fb:d9:9d:ff:71:24:
6e:d4:96:97:96:cd:7a:4b:70:cc:f2:c3:31:a0:22:
5d:75:37:ae:32:21:99:98:3b:ff:49:29:fc:d4:6e:
af:81:3b:65:f2:91:e7:7c:a3:33:36:c1:38:09:3b:
fc:e8:3e:7b:96:4d:4b:3e:81:9c:73:ff:8f:33:8f:
8a:2d:78:07:89:b2:e0:dd:70:3e:43:8e:3d:ba:79:
f2:10:60:c4:8d:ed:5a:48:4f:89:bc:22:13:11:54:
d0:31:2a:31:42:38:88:23:3a:fd:6e:6b:a0:3c:5b:
89:d1:a9:b0:2b:e2:28:51:8e:3a:c6:e5:1c:e6:f6:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:EA:4F:9A:AF:A1:5C:8F:78:9F:93:FB:BB:F8:26:81:56:65:2D
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:48:15:6c:a5:af:87:25:0d:28:e2:95:27:87:fa:43:fd:c9:
88:7b:af:f8:58:62:58:d5:4f:30:e7:a4:ca:58:b1:9c:08:dc:
c4:65:4f:73:44:42:24:39:ed:25:3f:6e:40:f5:04:96:37:65:
fa:1e:2e:98:c9:e0:d2:a0:ed:c3:92:e8:47:09:47:49:05:a8:
e8:dc:11:82:f6:f8:7c:45:7a:1c:a4:0e:bd:83:1e:87:ef:4c:
45:29:13:95:86:f9:2c:ad:57:cc:43:a1:98:84:05:24:2a:53:
c9:58:d4:c2:0e:14:d3:51:bf:ac:38:8e:d7:46:f5:c2:23:fc:
7a:d8:23:13:9b:ae:57:8b:00:11:2c:11:57:3d:6d:ca:e7:12:
b9:fd:b7:46:0f:d9:4a:c2:c9:0a:de:47:c1:e7:e9:66:e9:77:
cc:7a:75:bf:3b:c2:0a:eb:31:47:1a:6d:ad:ae:d3:e4:f8:54:
a4:a2:7b:7f:31:00:f6:b6:c1:64:4c:44:82:cd:c3:f5:b8:f9:
dc:ff:74:7c:9f:01:19:4f:22:c3:68:bc:43:5e:0e:95:1e:90:
29:0e:da:40:0e:a2:a9:eb:27:a7:91:cc:5f:84:c1:c8:e7:0d:
0e:2d:52:bc:34:9f:e1:26:f3:51:c2:ab:29:4e:ef:e1:aa:e9:
84:09:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:03 2025 by rpki-client