Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: AWGlWQNGABx5ZK23aBUuR7ds+fXK6QHwNYjNi1Kr8L4=
Subject key identifier: C2:77:1A:7B:8B:59:2D:7D:5C:D3:49:86:AE:59:90:D7:AF:76:27:A1
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019A71EEA9D25FE6571FBD55D4FCAC780D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0FE3
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: vyP1ziOvQbhAaMoi1d0Xgmj4351s3KdOcHbPwV1N8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a9:d2:5f:e6:57:1f:bd:55:d4:fc:ac:78:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=c2771a7b8b592d7d5cd34986ae5990d7af7627a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:3d:9d:8e:d3:ba:64:de:0b:5c:aa:3f:1c:
01:44:e7:33:56:c0:29:fb:28:fb:b5:7a:9d:a7:2a:
5c:4e:0f:a3:4c:f5:1f:9e:4f:81:77:c5:14:e2:96:
00:96:db:4e:4d:29:58:dd:ef:07:a9:b9:77:66:5d:
59:f2:c7:af:6c:5a:6a:1d:02:0c:43:b5:ec:d4:1a:
cb:7b:5b:26:24:be:9b:87:90:91:67:7a:ca:ac:f5:
99:d1:ab:8b:0a:8a:76:1e:cc:ae:74:f1:d4:e9:b2:
00:f6:66:4d:ce:a9:8e:4f:e4:19:0e:99:a9:c6:26:
1a:b8:08:d2:55:66:0e:ab:92:18:70:55:50:03:14:
7f:19:9d:66:61:fa:b5:50:d2:e2:fa:32:7b:1a:bd:
fb:98:ea:fe:64:f1:0a:b3:ff:98:1d:10:21:ab:be:
d9:77:10:17:d9:0c:bb:6d:b7:c9:7f:1f:5b:63:c8:
ff:a2:e1:ca:f6:18:3c:69:74:87:32:c2:54:77:e9:
7f:c9:4a:5a:b3:9e:c4:d0:21:98:c0:4b:e4:a5:ba:
fd:01:b7:02:1f:56:60:80:5f:75:ff:96:9d:51:61:
9a:31:c3:ac:0e:04:24:f2:2a:64:5e:e2:c6:87:f2:
2c:1a:3a:65:16:6b:76:51:75:cf:3b:33:af:12:85:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:1A:7B:8B:59:2D:7D:5C:D3:49:86:AE:59:90:D7:AF:76:27:A1
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:85:90:dc:93:a4:41:e1:ec:92:6c:5e:46:bf:b6:cc:19:
fa:e7:c3:93:6d:00:10:c4:b9:3e:03:6f:09:84:95:8b:c1:38:
8e:69:45:92:dd:16:15:1c:a4:7c:b2:a4:7d:8b:2f:37:6a:88:
46:67:db:64:93:fc:00:90:ac:51:25:72:49:8e:5a:df:57:c9:
5b:e9:6a:a4:5a:9d:8c:c7:bc:bb:bb:b2:e5:bf:ef:56:35:94:
8f:dc:90:da:a9:ae:83:fc:2d:a5:70:a3:db:ee:3d:06:5d:66:
49:40:83:99:b2:6c:e6:44:72:8c:2a:26:5c:fd:2a:57:26:c7:
7c:3d:09:13:7e:26:78:17:a2:d0:2d:f5:61:04:89:cc:e8:c2:
31:b5:72:c0:0d:35:b3:09:48:41:35:96:f7:68:97:81:3b:33:
92:1b:40:a5:b7:b1:31:71:d9:85:d0:50:f7:8f:14:63:df:1e:
7e:ef:31:26:e2:cc:40:62:87:16:60:aa:22:60:4d:c4:01:15:
a7:32:c8:c0:b4:c1:00:38:35:45:53:e5:51:4b:5a:15:7c:e2:
2d:b7:bd:8f:8b:50:4d:63:6d:f4:a0:73:a9:8a:ff:f0:f2:d0:
7b:1b:71:f0:a5:76:dc:2d:7e:34:c3:57:fe:ac:bd:f6:e5:3c:
00:f2:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:00 2025 by rpki-client