Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: UWgDrfagz3WUsShjJvCb1FPD/j1NfsbwW3PmVQKxWLc=
Subject key identifier: 16:6B:FA:4A:86:2E:3E:00:84:CB:9F:C2:13:BA:C9:7C:17:2A:51:D2
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019A71EE7DA382DD52680CD14B708C36270E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0B6E
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: fQ9hRjEsrG2FhS5lfNL47kkzpcmxqSyzSl2uT21E14w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7d:a3:82:dd:52:68:0c:d1:4b:70:8c:36:27:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=166bfa4a862e3e0084cb9fc213bac97c172a51d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:cd:b3:b3:a2:bf:eb:02:c3:d1:a1:a9:b3:
b2:b9:4b:ab:a3:f6:ab:f7:87:c1:3f:db:96:cc:13:
2a:3e:72:40:bc:37:f4:cd:76:0c:29:7b:07:8c:45:
01:b0:d3:37:92:69:ac:7f:c6:9c:11:47:88:2b:bb:
32:b7:93:14:08:4d:6a:88:9d:7b:f7:f0:2e:5d:48:
fe:2c:d0:0a:91:d4:57:f5:a4:6b:24:8f:5d:75:d6:
58:e0:70:9f:c0:af:32:eb:80:79:30:b5:85:7e:55:
2b:27:6f:a1:b4:65:fd:3e:30:c9:a6:2e:dc:07:ca:
d9:a2:7b:c4:5d:03:ce:89:c6:95:15:98:6a:b8:39:
b9:54:dc:5a:60:b2:a9:fc:70:ab:5d:2f:2d:d7:c9:
da:16:8a:2f:a2:1d:83:4f:44:4c:00:7b:40:4a:65:
9b:b4:27:49:f4:06:c7:d9:78:ac:c2:c2:59:14:84:
e1:d5:b3:6b:19:f6:fb:f2:b5:05:ed:ce:dd:b4:3a:
3a:60:5a:22:af:1e:45:d8:04:a4:c7:9e:97:53:e5:
8c:85:bc:85:28:57:85:99:06:56:04:9f:4b:89:43:
e2:d0:5d:9f:02:7e:f6:09:37:10:ca:9d:37:5f:e0:
fc:7b:76:9e:dd:ff:a8:19:d2:5b:73:7a:d3:68:9d:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:FA:4A:86:2E:3E:00:84:CB:9F:C2:13:BA:C9:7C:17:2A:51:D2
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:db:10:63:b6:10:fd:23:9f:66:5a:7a:b2:d1:d0:31:3c:
2e:e0:98:3f:7f:6d:06:24:02:04:02:05:e6:e2:d4:27:27:ff:
e5:ca:a8:4f:71:49:44:25:f7:3a:3f:e2:ba:64:cb:9a:b7:b6:
7a:3b:86:4b:f9:29:5a:7f:e4:f9:64:30:03:57:1f:a4:ea:6e:
63:e7:ca:56:40:86:29:fc:33:ee:74:e9:2a:b6:b8:0f:f2:19:
66:df:a8:55:3a:53:f2:03:fa:7d:a7:49:e4:32:bd:c1:4b:6f:
97:6a:6b:33:8c:e2:8f:27:b8:ba:dc:ee:bb:26:d2:4d:69:59:
82:ea:5a:1d:4d:2f:d3:1e:9b:e9:de:61:eb:b8:9f:39:fa:8b:
d3:65:02:50:49:5d:e9:8f:1d:06:53:a4:50:67:3c:45:f2:70:
1e:d0:73:1e:02:eb:a4:ab:1b:49:50:eb:80:c1:d2:08:17:e2:
29:2a:83:9b:ab:1b:e5:d3:53:2b:eb:1a:67:7f:a0:6c:5e:3e:
17:a2:97:ba:99:83:be:60:de:a5:8a:a8:62:4b:bd:ea:29:42:
eb:e1:96:28:8e:86:ca:ed:b3:f9:70:94:7e:ed:3e:45:74:2f:
5c:31:01:66:7c:b8:70:42:ef:fa:ff:0f:5e:d8:c9:04:e8:a8:
94:6a:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client