Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: J84fA8jrEIMmYj6T67rHorDZfilvCsO+SrwQxwdFhIw=
Subject key identifier: 7F:4F:26:CA:66:2C:F1:7C:3C:C3:FF:C0:3F:28:1A:A2:CF:09:28:1C
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019A71B83C027B1F3D6C3228A8BA9CD6472E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: cs7wcdMMewBEkKIeK/3tFgWuvohrpbRtpcWsb77YxL4=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:02:7b:1f:3d:6c:32:28:a8:ba:9c:d6:47:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=7f4f26ca662cf17c3cc3ffc03f281aa2cf09281c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:48:5c:76:08:87:e7:c4:15:98:88:5c:c6:
1f:07:4a:65:81:55:b5:cf:f9:a3:8b:46:17:a6:7e:
6d:fe:a4:4e:b8:5c:85:b4:86:c5:13:a1:4a:16:5a:
ca:2e:79:b3:04:76:b9:f0:8d:0c:93:58:68:6e:ec:
e6:fb:c8:7c:be:62:73:e8:e8:38:c4:4d:14:88:2c:
c9:2d:37:1c:07:a0:91:af:18:4b:d3:02:9a:0c:03:
65:aa:43:e7:90:15:d8:c9:75:a4:16:02:6d:fd:cf:
17:14:38:5e:78:20:79:73:d4:2b:e6:4e:46:0f:e3:
eb:17:56:c5:0e:59:3a:2a:61:de:2f:a5:fc:68:29:
52:ad:f1:1f:7f:ce:9a:fa:42:5b:a1:8b:6b:7e:6a:
e9:21:1b:f2:5c:c4:5b:d0:87:d7:ac:75:86:46:2b:
0b:34:6c:9b:5a:49:b9:51:a6:d2:92:ce:2c:c9:27:
e4:28:94:df:e1:f0:71:cf:de:67:4e:7a:dd:18:ed:
0e:ec:fd:a3:5e:dc:91:7e:38:05:94:af:fe:89:e6:
f5:c8:72:ba:df:76:40:35:37:03:ab:d4:3a:01:d7:
3c:7f:f9:21:ca:35:ba:07:94:f4:f7:fc:af:6f:df:
5e:1e:fa:fe:4c:45:51:0c:46:2d:44:5e:45:65:54:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4F:26:CA:66:2C:F1:7C:3C:C3:FF:C0:3F:28:1A:A2:CF:09:28:1C
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:92:46:48:dd:18:53:b0:3b:b7:30:29:6c:09:14:3f:de:
b4:12:93:1f:15:b9:73:df:b1:b3:bd:a0:c5:a8:4a:1f:0d:c3:
f9:ea:bd:a7:8d:ef:a3:27:68:fa:33:6a:91:54:21:06:d1:f7:
48:43:1e:4d:b5:69:60:98:1c:d4:e1:4f:1c:38:7b:01:f7:b4:
7f:ad:84:3f:e2:4b:58:b4:ce:e6:a5:9e:8b:fc:3f:03:9e:53:
55:74:82:bc:48:09:cf:27:73:9f:e2:c0:79:cf:fc:7a:0d:58:
9c:b8:85:95:f0:c6:1c:32:de:17:91:e8:96:24:95:f9:84:8c:
f5:5d:81:fd:6d:62:ad:d8:5a:f7:8f:1e:11:2a:68:2e:52:8e:
f0:6f:1b:18:57:03:1f:e5:84:e5:76:39:76:94:a9:1f:72:be:
12:87:48:07:36:8d:df:bd:de:f1:73:eb:91:01:72:ed:aa:10:
89:9c:dc:7a:bf:58:44:fd:9b:e8:a0:f2:90:7b:90:eb:97:4a:
c5:fb:66:71:ff:89:dc:68:a5:1c:3a:1d:2e:d7:7d:28:1d:6a:
45:8f:de:7b:5f:89:67:58:ed:47:eb:71:4e:0c:c8:92:18:18:
9c:c9:e6:a1:08:fa:36:fe:21:47:22:05:a5:cc:eb:8a:b5:f4:
40:60:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client