Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: LZfrJc4NK1XS1EtSMJt4wf9LeSw+vZeBTvJqLqb35e4=
Subject key identifier: 2B:7A:85:AC:4D:BC:48:6F:7E:A4:A5:88:EF:F7:F7:C9:78:07:2A:C0
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019A71809B8D10DFFBF29953329FA4DE6A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: EF
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=)
2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: IZZl+oGa0NNde8Yo1ZxSZGTNAyGv+Oz+U/7n4Wrkvzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9b:8d:10:df:fb:f2:99:53:32:9f:a4:de:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=2b7a85ac4dbc486f7ea4a588eff7f7c978072ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:1a:49:cd:12:5e:41:31:43:0f:14:9b:8a:
d3:8a:28:e4:23:b9:72:d4:f1:50:df:71:26:db:e3:
6d:44:19:b9:28:a9:61:02:10:7e:91:95:ec:2f:8a:
8f:df:4b:8a:f1:4d:0a:fc:d6:12:ad:8f:03:bb:74:
b6:87:e2:bf:04:26:d7:21:35:bd:17:b8:21:8f:20:
8d:a5:a7:a3:5e:61:38:4b:3a:82:74:1f:f2:5d:62:
82:e1:ad:d3:ac:4c:85:3e:2e:a7:f6:18:18:86:e4:
bc:2c:67:34:2f:b1:f1:29:57:f5:2a:b4:17:3c:32:
76:07:c1:92:72:4e:c8:c5:e2:31:ca:a6:78:64:df:
39:cd:6d:e6:15:6e:bb:86:c7:30:5d:82:41:a2:85:
df:d4:0b:a7:ba:32:d0:04:b4:32:f9:20:4e:87:95:
46:26:f3:d4:3a:6f:b0:ed:4a:da:66:03:59:4c:b4:
c8:81:53:16:f0:47:8c:6b:60:58:24:90:af:66:49:
3c:4b:87:83:e4:f0:ab:c9:83:f0:14:61:c4:e5:71:
4e:9b:23:9d:7e:b1:27:3f:40:77:05:cd:df:fd:e8:
6c:39:64:53:47:db:50:a5:8a:b9:9b:d2:0b:bd:83:
7c:ca:9c:94:50:c6:e3:25:00:13:1f:da:95:d5:c1:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:85:AC:4D:BC:48:6F:7E:A4:A5:88:EF:F7:F7:C9:78:07:2A:C0
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:41:56:73:94:72:2d:b5:d1:73:70:d3:43:86:22:bc:d2:b2:
ed:2d:e6:14:90:df:c7:f0:51:34:4f:75:26:18:05:a7:bd:9e:
d8:ff:1a:4e:64:57:2d:a6:27:2c:60:86:bc:71:35:a6:9b:7a:
cf:b8:d5:0c:c0:45:f1:ff:0a:ea:d5:57:a3:93:cb:11:b9:0c:
44:d7:55:8c:3e:93:e4:86:15:41:b1:80:80:fe:dd:03:af:b7:
cf:d2:86:eb:c5:e9:2b:16:e4:dd:8c:76:eb:6a:fa:c0:23:dc:
42:a1:0a:90:45:91:93:27:d3:2d:08:20:dd:6e:43:fa:79:25:
92:e2:97:a2:b4:51:65:2a:d6:07:26:e7:43:24:4c:52:11:2d:
60:b7:70:b6:71:9d:70:84:d7:5e:d4:1f:a0:ab:16:70:3e:df:
5b:48:7b:73:6c:ce:79:5b:4c:b4:b8:d6:bd:6e:cf:78:68:72:
43:19:dc:0b:98:aa:58:6a:05:4b:02:47:9f:15:63:06:a2:10:
69:6b:96:28:ed:18:03:f4:f5:66:13:fa:e1:be:a7:60:db:b1:
59:70:09:85:5c:74:52:eb:09:e0:93:e5:7d:22:c2:c5:92:62:
ac:32:66:b1:b0:95:7c:ed:09:79:c9:d8:6f:ee:9b:91:b7:f6:
a7:e1:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client