Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: HkAimY1K7UH/bbM6OhV/Cc7iTR7G17rbP0GB0h2o7F8=
Subject key identifier: 9B:C9:F5:CB:E8:06:4D:EC:9D:98:51:0C:7F:1B:8B:57:3A:0E:20:83
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019A7301C0E8B53C5F13CC49D18D829B7A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 1516
Signing time: Tue 11 Nov 2025 13:01:25 +0000
Manifest this update: Tue 11 Nov 2025 13:01:25 +0000
Manifest next update: Wed 12 Nov 2025 13:01:25 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: 4b8XbxdJq72SJRgoqTqht6WgHAyz0XLds1MjwQFE/pc=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c0:e8:b5:3c:5f:13:cc:49:d1:8d:82:9b:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Nov 11 13:01:25 2025 GMT
Not After : Nov 12 13:01:25 2025 GMT
Subject: CN=9bc9f5cbe8064dec9d98510c7f1b8b573a0e2083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:06:f8:ff:27:df:10:02:36:a2:94:c1:aa:
15:50:6a:72:cb:cd:d8:0e:19:f5:bb:6c:51:c1:af:
b2:bd:a3:af:09:26:6e:6e:d2:a7:8a:74:cc:4d:b6:
12:1e:d3:20:8f:b4:46:8b:a6:b8:4d:22:30:fc:e2:
cd:c8:29:93:8c:57:28:64:99:f4:76:e0:10:f0:4e:
33:52:2b:d7:05:a0:9c:01:11:45:20:da:1b:bc:89:
05:be:e1:dc:db:91:71:45:0a:9c:a8:ef:49:46:3a:
78:db:39:29:c5:30:74:58:77:20:5d:a9:90:00:6d:
3a:e0:a8:1a:30:6f:81:05:93:34:3a:a6:7f:40:71:
81:5b:64:6b:ac:d7:ab:40:84:cc:5a:af:58:4c:72:
60:4c:bb:3d:23:69:46:58:80:10:20:08:54:18:15:
92:3a:23:13:9b:d4:7a:32:3e:99:a5:3e:60:48:2f:
30:a5:4d:ea:76:f8:e6:21:7a:25:79:ed:49:64:66:
a4:1d:a4:bf:e5:4e:2a:4d:c7:b6:db:8b:3f:5b:85:
b6:fb:ca:6f:33:76:78:a2:2e:31:38:94:bf:ce:df:
bb:d4:58:ce:ff:2a:a6:f8:a3:99:52:dc:c6:a3:52:
bc:c7:43:28:e4:77:97:84:26:49:4b:1b:8a:77:d2:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:F5:CB:E8:06:4D:EC:9D:98:51:0C:7F:1B:8B:57:3A:0E:20:83
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:9d:03:e5:6c:f9:06:77:f6:26:e4:91:0e:cf:57:60:4e:
b8:a3:0c:2f:2d:54:c3:a1:7e:6e:2c:7a:13:d2:52:11:a3:1a:
17:6a:b9:93:09:15:0b:93:2e:f1:83:63:1c:20:de:e9:56:27:
88:df:ba:d1:06:19:9f:cc:8b:9c:01:fb:56:15:ef:46:45:74:
56:9f:99:36:9a:1f:f0:62:45:4a:31:26:5d:75:15:44:46:68:
1d:d6:63:61:52:2d:1b:b1:29:20:a6:a9:16:45:b3:4d:04:4e:
d0:db:18:fd:c8:9a:9f:1a:fe:46:a2:16:d2:fd:41:6d:b1:ef:
f7:05:61:1e:9d:f9:a9:3d:d5:90:ce:9f:e3:0b:d7:55:05:9f:
66:55:42:fc:4f:b8:1b:d0:d7:e1:b1:2c:6a:e8:9b:45:4e:98:
43:f7:c0:59:67:52:46:39:ba:c3:8b:b4:a2:52:7a:d2:d9:ac:
47:b1:d5:88:57:db:6d:e5:39:7d:e1:91:7d:28:d2:a5:e1:61:
6d:2a:e6:63:45:e3:1d:4f:fc:ef:d3:17:b8:9b:25:c1:ae:7c:
34:3a:26:e7:dd:bf:3c:a3:ed:7c:14:54:c6:15:21:00:82:c8:
71:a0:66:e7:41:a0:a9:78:a4:98:a6:f8:47:72:f2:a2:dd:54:
ed:a6:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:35 2025 by rpki-client