Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: TYPpjx6HZsRZ0thaG+CxRuyVDfNHqHyNhSVTfKv5GoI=
Subject key identifier: 18:93:25:17:02:49:71:68:F6:0A:E9:10:7D:5C:39:D9:CD:26:25:7E
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019A70DBDD29FFCAF3F366F0B151DEE4E720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 110E
Signing time: Tue 11 Nov 2025 03:00:48 +0000
Manifest this update: Tue 11 Nov 2025 03:00:48 +0000
Manifest next update: Wed 12 Nov 2025 03:00:48 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: 0bn1kx4SYJP/xF4/LWvy0p9ygOgixshoz2QcgZvVBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:dd:29:ff:ca:f3:f3:66:f0:b1:51:de:e4:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Nov 11 03:00:48 2025 GMT
Not After : Nov 12 03:00:48 2025 GMT
Subject: CN=1893251702497168f60ae9107d5c39d9cd26257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:6a:2d:f7:f0:56:67:a4:81:b1:f4:f6:15:
77:cb:13:58:3d:a6:dd:c3:34:b1:6a:7c:34:8f:05:
f8:e5:5c:cc:f6:37:19:5e:43:af:87:75:75:b3:f9:
0d:88:9e:e2:d5:a8:78:84:05:33:6c:ee:0b:36:13:
4a:58:61:03:a9:1f:56:74:aa:90:3f:b6:e2:8e:b7:
cd:de:4c:c0:ba:8e:2c:aa:01:8f:3c:3a:86:27:6a:
89:2a:19:cd:41:de:72:a8:84:ac:e5:b7:6c:21:9e:
b4:e4:04:29:b3:d2:01:88:72:43:e3:25:cb:a9:46:
0e:09:95:d3:16:0f:32:30:e8:d6:81:51:02:b1:aa:
27:ad:46:a7:0b:37:88:78:51:b7:b6:ef:cf:c6:04:
0d:d5:41:b5:c1:c4:96:78:48:32:3c:15:8c:ca:8c:
2e:1c:8e:54:ef:c8:e9:29:f7:38:07:0e:88:27:38:
7c:53:3a:0d:a2:d7:d5:09:39:ab:73:95:e6:31:8b:
fb:73:27:99:94:9b:70:62:20:ee:f7:0a:1f:de:ef:
6e:f6:94:70:df:fa:92:b7:d2:28:fc:54:30:12:f5:
e8:d4:78:a1:c1:2a:bc:fa:8b:2a:83:0e:53:d7:bb:
03:cb:75:49:1f:3e:a6:8f:3e:43:c4:d1:a1:6d:53:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:25:17:02:49:71:68:F6:0A:E9:10:7D:5C:39:D9:CD:26:25:7E
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b9:80:7b:39:fa:57:ad:b7:4f:fe:a9:12:86:f6:db:14:30:
57:32:9b:ce:c9:d2:5c:de:1f:3b:f1:b8:27:9c:5f:d0:29:5a:
fa:ae:ba:07:27:ae:20:c4:67:4d:5b:e4:56:3e:47:5b:ae:aa:
2d:66:05:80:50:02:41:4c:28:3a:d3:11:d9:02:be:9f:d1:3a:
84:ce:95:b4:50:71:5c:61:ff:a3:33:70:be:37:37:38:e0:e9:
ac:b1:8a:77:ee:24:3d:bc:73:4f:91:db:b6:50:a7:04:7d:59:
fc:ca:cd:b6:a3:e1:23:b2:4f:5b:b3:d2:a5:5b:42:fd:c3:4e:
d4:40:8c:83:6b:86:8c:05:35:d3:2d:1e:bb:20:16:d8:ca:3b:
9f:e7:d5:cf:ff:4c:3e:72:cb:0f:33:24:66:ac:47:36:91:ef:
db:a5:db:ef:f7:bb:18:30:28:55:10:f3:6d:da:e6:27:cb:c4:
bc:fc:2e:e5:08:ce:d4:d6:f2:c4:96:12:56:9d:58:f6:99:40:
d7:cd:5c:3d:09:4b:f3:ba:1c:d1:7a:c9:db:ab:a3:ca:11:8a:
4b:dd:2a:8b:24:72:2e:c0:90:6d:5b:4c:9a:d3:cd:2a:5b:e6:
26:fe:28:bc:79:a0:83:ed:f5:1f:1b:0c:ec:5b:a1:b9:de:48:
27:d3:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client