Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: EhZRcIjI0E5uSZQY9N1Zctcogr0mObd9MdwyNjxh790=
Subject key identifier: C2:A0:B8:5B:E2:AE:EC:82:05:20:7A:03:54:91:F9:B0:8E:2D:96:F5
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019A722603EBC91E52EC398A781EC0F8C9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: Z85dVz4aJOJ7rxJIVJkyNQJrh+nbtrHOXsD6L2AIGBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:03:eb:c9:1e:52:ec:39:8a:78:1e:c0:f8:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=c2a0b85be2aeec8205207a035491f9b08e2d96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:c6:f8:73:cc:4d:b6:e1:47:be:68:57:2a:
1c:2e:01:30:51:49:80:7a:97:b8:6f:36:0c:02:1c:
21:03:19:c6:76:8c:ea:27:b7:f1:c7:58:c8:82:ce:
cd:61:6a:6b:6c:db:07:e4:fe:bc:a5:fc:ea:ca:4a:
ce:67:a5:22:a0:71:22:56:72:57:82:ba:22:52:df:
91:c0:35:5f:94:d9:4e:17:f4:42:97:8e:5c:ff:fa:
22:72:0f:b9:e3:74:86:48:40:67:d2:c8:cb:91:9f:
6b:d4:82:26:54:1c:78:6d:39:4d:e6:a7:1e:3f:f8:
5a:ba:6d:1c:b7:f1:92:5f:c5:5d:fa:6e:63:a2:91:
dc:84:f6:c5:b5:0b:fd:5c:6f:46:5f:6b:06:fa:4e:
14:8a:65:49:0e:11:77:ae:6d:cb:68:37:c0:ff:16:
a3:9a:92:5d:e6:fa:46:7d:9d:55:7c:dd:e1:df:e8:
52:91:7e:89:39:39:17:ae:0b:cd:ff:93:23:f6:dd:
7c:fb:d4:3d:0c:66:12:a1:ac:d1:db:c5:f5:22:7f:
78:02:ab:b8:22:8d:40:ac:8d:7e:1c:35:df:87:9a:
83:e4:bb:dd:d6:c8:c9:b6:a0:1a:00:2c:2c:3b:84:
2f:97:2e:94:d0:00:b8:08:c7:60:e0:23:e4:fd:9e:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:B8:5B:E2:AE:EC:82:05:20:7A:03:54:91:F9:B0:8E:2D:96:F5
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:38:bf:c0:68:ef:56:35:c3:01:74:45:02:0c:9b:17:bb:
7a:d5:6d:45:bc:79:5f:e4:12:bc:7b:95:a4:3a:e8:97:01:fd:
87:ac:f8:71:92:17:56:80:88:01:11:9c:75:13:86:b2:d2:58:
38:74:91:cd:48:8d:4a:e8:96:ff:fb:c2:04:5f:12:29:a6:2d:
53:31:4d:2e:ad:ee:50:33:3b:f5:73:26:59:ab:93:d1:84:8e:
6e:50:8c:4b:c0:3f:bb:b2:a8:bb:2a:50:e9:55:fb:f9:d1:b3:
33:a1:1f:70:8f:87:fc:0c:69:b2:9f:44:37:83:b6:20:af:63:
5b:6a:4a:cf:c1:64:d8:f4:f5:f0:dd:5c:f8:48:f7:9e:31:66:
06:1f:e5:17:3b:38:67:fc:a1:a4:8b:cc:fa:ef:53:35:74:23:
8f:ba:f4:79:f9:fc:7e:f5:e2:1c:63:dd:51:68:dd:ea:47:7a:
9d:0a:6e:6a:f8:1a:59:16:25:c6:60:85:c8:66:16:3e:8b:72:
b4:69:2a:3b:cd:c8:29:48:65:9f:a1:0a:ca:ff:06:8c:f6:55:
63:94:fd:b0:5c:fa:ba:f4:2c:76:6b:fa:ac:ad:62:8c:14:65:
66:9f:52:a7:53:01:59:6e:4a:3c:19:a4:63:fe:91:b6:3b:bf:
16:db:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:18 2025 by rpki-client