Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: SBBHMcTzYxviZ04M0QR866/NZJhIUkRwMmpmNWG+dU8=
Subject key identifier: C7:3B:17:C1:F4:76:00:F8:92:F7:7E:C9:E6:F8:3D:86:58:26:BD:87
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 019A71EE8341A65C7CC5DC19E68B3A40CD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 0941
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: vphNnTk36bc6BZWGwSxMLe8d8ytRzGXJvi7i5o20ERk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:83:41:a6:5c:7c:c5:dc:19:e6:8b:3a:40:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=c73b17c1f47600f892f77ec9e6f83d865826bd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:d7:f7:ad:65:ae:7e:02:54:53:96:4a:12:
03:a7:ef:ed:6e:a2:4f:bc:24:74:7c:84:ce:05:53:
53:1a:33:05:a8:7a:f9:5e:f5:a3:49:2e:3e:4d:b9:
2a:e0:b5:91:cb:26:e2:fd:77:76:1d:00:18:90:c7:
ec:1e:40:ed:9a:a1:61:22:92:12:eb:32:ab:6a:c8:
d3:34:9e:68:39:72:d1:4c:a2:c7:b1:1f:cb:dc:17:
b3:8f:ce:7e:db:f1:bc:65:7f:97:4c:5f:de:bd:fe:
3f:6d:09:2c:c5:66:7c:e3:50:95:ba:99:6e:91:e3:
31:df:45:0b:8a:16:91:c5:e4:c4:80:36:5f:b5:34:
f6:95:42:70:e0:e6:68:04:7a:17:0e:a8:e5:3d:27:
f6:a9:76:8e:8e:c8:49:fd:f8:43:ac:0a:10:68:a9:
b3:d3:81:07:1d:2c:da:da:de:1d:28:36:5b:c0:59:
fe:55:16:42:1e:9c:9e:c7:23:96:b2:87:2b:a2:e7:
ff:8f:92:23:89:e2:34:e7:62:95:b6:46:cc:75:50:
d4:cb:c9:d7:2d:6d:1b:70:33:35:22:3a:c3:79:4d:
ad:90:a3:33:4b:22:94:0d:ea:67:1d:ea:4e:e8:59:
b7:f5:b5:04:b5:ec:c1:41:1a:10:0c:2a:06:3f:29:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:17:C1:F4:76:00:F8:92:F7:7E:C9:E6:F8:3D:86:58:26:BD:87
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8b:73:b9:9b:82:ff:bd:0a:f5:8a:2c:00:73:dd:b0:47:ea:
bf:be:a3:f0:d9:00:ec:e6:93:a5:13:7d:98:5b:53:20:38:16:
58:b6:00:e0:34:5d:27:e7:20:11:a6:7c:79:5b:53:50:cb:8b:
d5:23:e0:78:30:59:62:c2:54:c0:ed:d1:ab:df:45:90:a0:48:
d9:bf:8e:dd:08:a8:9c:90:64:ef:ce:ee:be:88:a6:98:01:00:
90:a5:34:ab:9b:f8:65:b9:12:83:2d:4d:97:e7:50:db:77:60:
8b:84:0b:d9:79:43:d1:80:23:50:4f:11:8e:58:ae:ea:57:38:
73:d7:70:54:33:a5:f3:71:5b:c5:8b:4d:6c:a0:20:c6:7d:10:
92:1a:1c:c4:f5:5f:7a:71:f3:ca:65:d6:12:08:5e:84:e6:c0:
10:b7:ce:5c:c6:d8:a6:cb:e8:76:3c:9d:b8:30:56:2b:2f:14:
b2:f0:3c:c3:49:ce:65:b8:a5:d9:16:f0:b0:dc:99:33:cb:a1:
b6:22:39:bc:3e:1e:90:10:38:a0:d9:a1:84:9c:93:fb:08:6d:
21:72:96:06:d0:36:56:7e:9e:d9:bf:6f:2a:b9:42:17:77:1a:
7a:4c:91:e6:45:ea:b2:73:64:32:6c:3c:1c:27:8c:92:da:cb:
3a:43:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:26 2025 by rpki-client