Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: BMUx3Wi94+ucaNDG677tpa5n/vHT1XUwwnTcBS7JUXg=
Subject key identifier: 46:01:11:2F:41:B2:F1:97:57:AF:39:25:EC:C9:00:34:C1:5E:BD:A5
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019A729331EAE464E5EAC8E5A0D9EF375659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 15D5
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 8mrp6bBtmRWg/jsOaLnIjXteKo6kE0xa2l0pHoKYiqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:31:ea:e4:64:e5:ea:c8:e5:a0:d9:ef:37:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=4601112f41b2f19757af3925ecc90034c15ebda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:ea:89:fc:37:46:ab:ec:bd:ce:e9:1f:fd:
ba:86:ac:0a:61:d4:19:ec:f7:9f:18:30:6f:41:5f:
d4:14:35:a0:ca:33:66:28:cf:f1:87:ed:f0:2f:31:
f8:be:af:93:04:75:0d:9f:69:de:6b:37:c7:0b:f4:
04:d3:25:cf:c6:e2:44:8f:85:80:b7:92:eb:b4:34:
ba:bd:39:77:22:89:38:6f:08:62:b2:bc:47:63:b8:
f5:fa:ee:61:f9:28:06:5c:fb:25:2a:58:5b:a5:ec:
30:cd:01:84:57:79:bb:fd:f6:71:69:d2:39:37:d9:
79:b1:e7:55:9c:99:03:84:06:55:19:b2:a5:66:6a:
a6:13:ef:a3:0d:0e:7f:cc:41:2a:f1:e9:70:cf:c8:
5c:0e:8a:38:15:55:a3:8d:76:b3:20:8f:f5:3f:f5:
62:01:36:75:31:0c:9b:54:5e:8b:92:99:ee:f8:1b:
0f:7a:73:f8:7d:11:ea:fc:29:40:59:f2:ce:48:cb:
1a:08:65:87:57:7b:43:5e:3c:a8:1d:91:18:9e:e7:
0e:54:50:30:0b:e2:22:8a:26:5e:12:26:31:66:b5:
ef:cc:f8:ce:f2:2d:d5:4b:52:80:ac:e5:d1:2d:b8:
e2:0c:1d:30:f7:3f:46:20:3a:3a:1e:cc:8c:1d:81:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:11:2F:41:B2:F1:97:57:AF:39:25:EC:C9:00:34:C1:5E:BD:A5
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:a3:cf:4e:db:ba:d6:67:4c:31:10:a0:1f:e6:a7:db:db:
7a:04:72:b8:3c:ac:35:11:d8:d3:5d:00:f2:d1:69:8c:f0:34:
3f:9e:2a:65:43:02:53:f0:43:c4:3a:b0:f4:b0:d1:78:6f:da:
46:c3:ea:8c:72:29:34:fd:93:82:98:32:24:b4:0e:ab:91:fc:
dc:76:26:fa:90:1b:d2:f6:c4:d1:7c:04:b2:d8:a0:8f:9a:0f:
8f:e4:7d:f0:d6:0c:89:e0:a8:09:a8:8e:f6:a7:b0:39:59:75:
85:25:41:c0:39:a1:ef:8d:86:e9:33:0e:f9:a8:88:b4:1b:79:
b2:a5:f2:a1:2c:34:84:dc:3e:02:08:3b:69:ae:b9:8b:e1:21:
a3:dd:de:b9:a9:b4:40:0f:68:3f:56:54:7a:65:e2:32:f3:b1:
10:c5:a2:df:38:cf:89:a7:71:63:2f:9d:31:14:6b:e4:ac:67:
ec:c0:45:d9:4d:73:84:35:45:4c:db:81:ca:15:19:8f:0e:25:
fe:44:17:d9:71:6c:81:1a:87:43:c3:f4:15:d6:1f:79:db:14:
fd:80:be:37:72:ff:af:b4:87:71:0c:85:7b:dc:7d:fb:1d:3b:
3d:31:44:0f:e6:0e:c1:e7:a4:b7:6f:c4:d0:96:12:99:ec:b0:
cd:4a:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:29 2025 by rpki-client