Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: Hulc8eBKF0gt1Sy/z1ms3olErs1xwaiLgjZq0BoHH2k=
Subject key identifier: F8:CF:91:A3:48:50:01:24:C0:A6:7A:7B:14:72:04:2A:D1:20:31:DB
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019A725C5E49BD7D52BD77244304A016F6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 043D
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: 0BOMK5yPB3zxnLmWdcou7kWWsejVKJD8yQDAVT4qALQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5e:49:bd:7d:52:bd:77:24:43:04:a0:16:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=f8cf91a348500124c0a67a7b1472042ad12031db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:c5:73:46:f6:48:00:72:d0:86:cb:1b:59:
8c:db:36:75:ae:75:63:0d:f1:8a:83:b0:fd:71:4b:
0f:8d:d2:34:84:f8:54:49:50:33:f5:e8:4d:f1:7c:
b4:35:74:05:29:98:53:2b:0f:30:fc:bd:67:a2:e5:
9d:72:99:13:10:59:1e:53:63:ac:96:6c:1e:15:43:
c8:29:6c:f8:88:4b:96:78:c1:8c:81:62:ee:8d:59:
32:c0:f2:52:03:cf:56:bb:06:e9:13:9f:24:10:f6:
11:71:a1:f9:7c:dc:6e:36:36:ad:fb:25:c7:1c:83:
97:d3:4b:78:ca:df:1f:29:72:26:b3:f8:fb:27:01:
b6:1c:a8:60:fd:cb:15:fd:0e:33:0b:88:2b:2d:da:
fd:c6:2a:7e:3d:1e:14:d5:e6:d8:2e:04:2a:69:a2:
1c:3a:e2:da:10:c2:cf:4e:14:1b:8b:22:6c:f3:fb:
6b:b1:78:58:02:45:75:04:90:7a:ad:e8:3f:68:f3:
5d:83:08:46:17:8b:59:55:ea:68:a0:ba:5d:53:ff:
08:f0:6f:ba:6a:af:46:6b:5b:0d:4a:20:2f:fc:5f:
1e:24:ea:94:5e:f6:56:f2:04:88:60:8f:bb:f7:76:
e2:4b:3e:35:07:c3:9a:e5:4f:35:65:87:df:ba:d0:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:91:A3:48:50:01:24:C0:A6:7A:7B:14:72:04:2A:D1:20:31:DB
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:46:c0:9e:1c:04:a5:fd:eb:b7:51:4a:53:18:02:a2:af:
27:5f:25:ec:9e:bc:e6:7c:06:fa:b4:ec:cc:c6:e3:4d:cc:63:
21:a1:e1:27:7f:f2:c7:c4:29:9b:f9:a0:61:77:cc:bf:cb:e0:
31:0f:8c:2f:17:e7:63:6f:30:25:9f:a3:6d:2d:78:38:a8:63:
ca:3e:6e:03:e0:d9:0e:6b:4b:3c:92:b7:56:0d:f9:af:52:ab:
4f:21:a8:67:b9:a8:1f:3d:56:2d:e2:ea:dd:ea:97:79:1a:af:
75:bb:23:13:0c:9f:a6:a3:91:e4:9c:d3:37:30:b4:89:8a:f0:
32:fa:24:be:5b:7f:69:9d:6b:be:01:84:4d:cb:0c:cf:bd:02:
97:17:c3:65:7e:12:0b:62:ba:f5:a6:ca:31:17:b7:0f:18:52:
28:0f:83:57:b6:ce:86:19:5c:58:52:dd:02:4d:85:f7:1f:4f:
ac:ca:f2:0f:cd:e5:73:55:cf:ef:0a:6e:69:f6:ca:ac:9c:82:
42:b1:ed:41:e4:90:5d:af:9d:67:d1:dd:cf:cc:d0:24:0e:39:
13:cc:29:78:29:9c:26:7e:5b:9f:95:bc:16:be:d5:6f:52:2b:
81:1a:4c:9b:28:66:17:71:19:6b:75:87:19:89:eb:23:7a:2f:
d6:21:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:27 2025 by rpki-client