Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: +gi+3iPeyagRE+Cm9IL7b9JLW2A1QO/D2Oz6V1HomNs=
Subject key identifier: 3B:64:97:98:F4:31:07:D5:F7:42:73:46:CF:92:6B:0F:46:84:6A:52
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019A72935A9A27FDA5C4F3E2DFB4294B0188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0DB9
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: C3gF6pjQzEHsUrOL1WfOfXggQuPxZw908auMs6VEdss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5a:9a:27:fd:a5:c4:f3:e2:df:b4:29:4b:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=3b649798f43107d5f7427346cf926b0f46846a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:d4:00:92:c2:82:1f:6e:8b:cf:57:78:54:
21:3d:bb:19:dc:36:41:ff:98:3d:cc:4b:9f:97:32:
94:2b:00:4b:79:c9:ea:f5:dc:09:28:89:d8:8c:6a:
bf:0f:dd:01:06:ad:02:25:f8:26:0f:64:b3:23:76:
59:58:c7:d9:fa:46:74:0f:32:35:d1:9d:bf:c5:c5:
4f:10:8e:d4:b3:64:d5:e7:49:a7:d2:c5:d3:91:af:
6a:62:9a:c2:6f:e0:64:e8:06:4f:1f:d3:8a:9d:b1:
54:f1:7d:92:e0:f8:9c:04:91:d4:42:c2:ec:d5:50:
8c:32:66:99:a4:ea:13:38:3c:d6:33:21:4b:ec:1f:
d5:43:ee:54:21:da:ae:b8:7e:cc:28:72:ae:27:29:
5f:1a:6b:52:1a:41:a4:a0:85:b8:b7:31:dc:e9:68:
3c:5d:7b:a7:eb:ce:ff:0e:a2:67:9b:ac:10:60:4a:
b1:b9:77:36:d4:f5:5d:89:0c:6f:d6:26:1c:d6:82:
c1:f8:bc:ca:22:96:f4:02:00:6f:95:db:00:97:57:
3e:9f:ee:9b:70:d0:69:ed:e8:de:a1:3a:10:62:92:
4a:2c:e3:99:4e:d3:59:a2:3d:29:ea:58:8f:ca:1d:
3b:f8:ec:90:32:f4:53:1a:f8:9d:c6:28:69:7a:dd:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:97:98:F4:31:07:D5:F7:42:73:46:CF:92:6B:0F:46:84:6A:52
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:bd:d3:82:79:d2:7d:2f:e2:4a:54:86:97:67:4d:09:67:
e1:e8:87:2b:05:81:ce:c7:e3:bb:53:ab:c1:50:21:6e:9a:4a:
4a:ee:0a:00:59:5a:a3:da:69:00:83:29:a6:8c:9f:2f:2f:bc:
cd:53:e5:f0:ea:e8:57:96:36:ed:f0:7c:1d:55:c4:11:a7:bc:
6e:09:42:5e:00:ee:88:03:6d:a5:b1:80:26:8c:ba:a5:09:54:
ad:b1:d4:7a:c8:05:72:7a:22:bf:6e:f8:e9:1b:66:f3:ef:a1:
89:68:92:ae:a9:8a:0a:14:b0:b6:3b:fa:9f:65:36:1d:8d:d7:
0a:c6:cf:d2:de:f1:e1:2e:f6:be:ef:3f:6f:49:e8:6b:3c:dd:
a0:55:82:19:7d:be:04:9b:ea:cf:9f:0d:83:99:a5:e8:b6:9e:
cc:dd:34:0b:ca:1e:45:9c:8c:f5:43:ac:27:93:54:0e:49:2a:
ba:1f:60:af:99:af:8e:8e:ca:7a:43:bd:bf:47:99:e8:6f:e9:
e7:18:ce:62:a8:a6:c9:7f:35:52:14:69:b1:f3:b9:7e:fa:91:
64:cf:d9:6c:f2:6a:94:e4:1c:db:fd:db:38:43:bf:eb:15:90:
66:82:36:8e:d1:2a:ef:03:47:b6:fd:33:4a:d1:0e:ef:6d:b7:
a6:5a:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:38 2025 by rpki-client