Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier: BukKwYckByxPP7AJgwDlie2qdIYi4MeUFg83IMQxf/4=
Subject key identifier: F4:5A:00:BA:3F:55:EC:C0:1C:AE:B5:D0:26:6C:13:CB:D3:B2:E3:25
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 019A7226616813D0F84D27B1C30BC5EA12B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: 4wokyQTtKqWg+4ZnGJdF3//xf7aXNQg0fvdgEdD7qeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:61:68:13:d0:f8:4d:27:b1:c3:0b:c5:ea:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=f45a00ba3f55ecc01caeb5d0266c13cbd3b2e325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:5a:42:1e:ac:79:14:33:dc:d4:61:8f:ae:
28:f2:df:7e:7f:35:00:b4:82:41:d9:47:d8:b6:20:
cd:6f:0c:3d:9a:b3:b7:5d:a7:88:4b:d3:00:47:fe:
23:77:c8:d5:e4:0f:fd:98:73:f9:ad:d7:3b:a8:c2:
03:8d:1e:73:17:cf:06:0e:bf:2a:fa:8d:f0:27:e1:
bc:a5:0f:ed:4a:07:89:67:72:a8:28:90:81:f3:e6:
04:01:1c:59:ba:28:53:44:6c:55:a5:cf:48:21:54:
02:07:62:54:bf:3d:19:36:12:01:0e:54:ae:fd:65:
e5:9d:3f:2e:68:35:f9:8c:ee:4c:49:ca:df:14:73:
0b:57:63:af:ac:a8:92:e7:86:b9:e9:6d:5d:e2:54:
9e:d2:7d:ed:24:ae:8a:3e:dc:a1:51:43:da:db:1d:
3c:b4:6e:92:66:3d:59:ac:dc:07:93:ca:23:71:bc:
23:a4:a6:1f:3d:15:14:80:9e:19:a2:bd:72:94:e3:
60:95:79:c3:92:23:22:0f:01:6c:bc:d9:29:0b:9e:
4b:77:95:1e:88:b7:fa:65:ca:ef:7a:26:27:21:a1:
2d:74:20:b8:9d:1b:13:be:93:a9:5a:2d:c6:45:f7:
86:3c:50:46:06:b3:d2:9a:11:d9:e0:22:16:7b:4b:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:00:BA:3F:55:EC:C0:1C:AE:B5:D0:26:6C:13:CB:D3:B2:E3:25
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:fa:8b:ba:9f:f2:7f:11:6a:5e:7e:7f:58:7e:ff:87:da:
a2:0e:e7:6b:ee:a1:03:4e:2e:ef:02:bb:7c:61:a6:94:67:2f:
b5:88:60:6d:79:eb:87:17:48:bf:6e:93:ae:0f:6c:9a:2a:0d:
eb:89:53:a2:67:c4:73:d7:82:17:40:bb:27:2b:96:39:35:30:
be:26:09:49:68:1e:05:a8:df:d5:63:fe:50:32:f7:3a:84:10:
7d:0d:e3:a8:73:7e:0f:ef:1e:09:55:c2:3c:58:a1:89:4e:b9:
25:01:c9:2b:f6:7a:8c:04:c7:2c:5d:da:d3:7e:94:7e:2f:35:
c2:c2:92:e7:9f:71:ce:fb:cc:61:22:06:15:48:7c:71:e9:15:
81:b0:56:5b:b7:b4:75:37:da:e1:a3:85:80:a7:bc:1f:36:4c:
1b:ea:7d:a1:29:30:fa:53:ca:a4:68:36:b7:99:bb:88:43:c9:
ec:0d:20:e5:02:9c:a0:39:1c:b6:2d:29:ce:13:ca:a9:be:55:
9a:6e:dd:00:df:c8:2c:ed:b2:bf:6e:ba:82:f0:af:bb:f2:d2:
83:82:e0:55:41:65:0b:f0:12:59:af:f5:8c:6c:66:ee:17:ad:
76:42:69:39:a4:6b:d5:22:fd:e9:93:3d:4a:bf:39:4a:03:b0:
b1:e6:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:51 2025 by rpki-client