Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: HM3WGNB44ybyXVzmOmPLoMeKdJgcIbU1IdKbebw4s1A=
Subject key identifier: AF:46:78:9D:3E:01:B8:7F:6E:D1:53:18:5D:EF:10:CE:3D:80:79:90
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 019A7225BD5B8E25F82968CB2E906EDB3A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 162F
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: 7RDFXPjrsOP1xoNDbjyuRIFVoLXACVFogKKxowJtLRY=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bd:5b:8e:25:f8:29:68:cb:2e:90:6e:db:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=af46789d3e01b87f6ed153185def10ce3d807990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:af:b8:e7:4d:46:48:d4:b3:4f:0d:57:6a:
09:97:eb:32:89:cb:c7:63:75:ac:4c:07:6a:17:3a:
3e:f7:fa:c6:99:eb:c9:3f:98:d0:ca:b1:9d:46:31:
df:fd:6c:52:d5:a9:c3:57:48:b0:51:da:79:ca:a5:
02:ee:84:94:9e:82:c4:16:eb:f1:98:e4:18:10:70:
b4:bf:5f:12:02:ac:7d:98:e2:7b:73:a1:fb:a9:6e:
62:7b:81:04:31:95:5f:ea:02:ae:bc:e9:f4:08:c2:
35:61:a4:e8:1a:27:9c:42:fa:57:4b:5a:42:4e:fa:
f6:de:4f:24:bc:fd:ae:96:af:5d:98:bb:de:64:b2:
7d:84:2e:bf:f3:1f:48:fa:7c:ad:97:df:94:91:17:
b9:51:b7:4e:32:7c:a8:22:d9:45:ef:9e:cc:47:43:
e3:74:d8:4c:4a:be:80:c7:f7:19:82:e1:0b:61:73:
2e:38:f2:d1:87:7e:80:60:92:56:47:44:e4:05:3f:
b2:91:7d:57:bf:55:a2:94:12:d7:15:8e:2d:52:9e:
f5:f7:54:14:4d:c2:98:4e:c8:8e:12:b9:e3:25:c4:
f8:74:b5:f0:fe:f8:1b:cd:68:0b:16:37:ae:68:08:
5e:76:5b:b6:3d:51:7d:e4:9e:82:7e:30:5d:4d:7d:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:78:9D:3E:01:B8:7F:6E:D1:53:18:5D:EF:10:CE:3D:80:79:90
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:72:a4:d6:b9:fb:6a:11:cc:e2:c0:34:a9:62:cb:af:62:43:
72:37:07:2e:f3:d5:c8:41:5b:9f:f6:c6:c7:25:27:8a:6b:4e:
c3:f9:0e:24:db:f2:ed:e0:16:80:e9:da:72:a4:1f:aa:a3:1b:
3b:be:3f:eb:db:55:73:d9:5b:5b:95:59:d8:0f:d3:40:fd:24:
e9:80:4d:9f:a2:4c:70:d3:98:f2:e0:8a:1c:f0:f1:f9:8e:cf:
a8:76:7f:23:f1:2e:8c:21:6a:c1:06:fc:2a:ed:e0:03:e6:b7:
ef:0e:d5:75:75:f3:50:24:a4:ef:ed:66:54:4f:c4:4d:bb:1e:
be:d3:1a:63:5b:aa:9d:9b:5c:98:d3:3a:4d:85:b9:17:da:29:
39:a0:5e:ba:0e:a8:89:ad:f6:17:be:44:41:32:1e:1a:5b:46:
11:18:7c:13:03:1c:c2:73:37:43:8f:57:48:11:36:91:fe:e8:
87:14:43:5e:fd:f3:c5:c2:73:1c:18:a2:33:b1:3f:6c:bb:f7:
4e:63:ec:81:77:52:71:f6:17:bd:28:c9:09:99:c5:18:6c:6d:
7d:ce:3c:fd:de:9a:75:8f:4d:b5:35:1a:b1:59:dd:8a:90:13:
ff:c4:5e:05:a0:33:01:97:31:4a:18:8a:d7:a3:1c:25:8e:7c:
0e:ef:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client