Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: 3iQPjhtB/hiHCGI6dHYyEafDZeEaXWzp/XHMBcSdtC8=
Subject key identifier: 8D:E8:57:29:73:7F:7D:86:12:50:14:4F:48:82:73:9D:E7:1C:1F:EA
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 019A72935AB42D5B9EE3B4A6C77DAE5D9557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0D53
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: IUPq+vycQgtjT1EwOWg5mmDH7M7cJotB+1Wb3uuYNv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5a:b4:2d:5b:9e:e3:b4:a6:c7:7d:ae:5d:95:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=8de85729737f7d861250144f4882739de71c1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:54:73:b8:da:e2:fa:d0:04:90:83:da:75:
5b:38:0c:98:8e:63:80:d8:a6:ac:73:6a:eb:ff:d6:
9b:a5:77:56:b1:95:37:a1:aa:06:be:73:1f:70:67:
4d:17:0d:63:40:57:ca:cc:32:d4:c0:80:dc:d4:e4:
cb:5c:cd:cc:d7:09:3f:d5:e4:e5:d0:bd:19:d7:90:
66:67:14:0d:d5:95:84:a5:42:99:a7:4d:4a:07:ae:
3f:9b:28:65:39:9a:94:8b:45:d5:3c:dc:a8:30:19:
06:f7:4d:9d:51:5c:fd:02:80:0a:d6:b5:11:36:a9:
02:0d:a1:32:7c:46:fd:1d:ec:97:93:f8:5a:84:1b:
34:d5:eb:2d:2f:31:aa:ea:53:bf:3b:67:45:c1:0c:
94:88:0d:2c:5a:68:8c:95:2c:12:1a:a2:ee:ab:62:
bc:02:e8:58:31:7b:00:dc:6b:58:36:dc:eb:25:03:
e6:b4:30:44:df:7d:fa:79:a3:ef:fa:4d:82:a4:86:
b4:c7:d2:40:1c:dd:26:43:ae:75:09:2f:45:91:3f:
e6:ee:61:37:4e:0c:94:b5:84:55:77:23:dd:2d:d4:
08:e4:f8:ab:8b:f4:e1:da:13:56:33:e7:61:5a:6b:
ac:03:e2:33:2a:aa:1c:60:4b:03:ba:66:d5:ff:f5:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E8:57:29:73:7F:7D:86:12:50:14:4F:48:82:73:9D:E7:1C:1F:EA
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:56:03:ae:76:54:91:46:b0:1f:03:36:29:69:bb:96:92:f9:
1c:96:71:f5:e9:af:6f:0e:30:55:19:c1:91:d1:09:0f:86:cd:
5a:e3:3b:b8:6c:83:a5:f6:83:26:ff:7c:50:b4:88:c9:5f:3c:
32:58:22:42:29:d9:f7:3c:eb:26:a4:19:c7:d1:1e:e6:e7:9d:
f4:c3:3a:4d:a5:ec:55:da:4c:31:c7:42:c4:9d:a9:7b:02:1c:
44:eb:67:ef:e9:e4:64:38:c6:c5:4d:c6:86:55:51:51:f8:4b:
5a:e2:de:59:77:2a:4c:f9:70:86:84:68:9a:02:19:c3:82:11:
94:fe:aa:ed:63:25:09:3a:96:83:f7:08:1c:5c:1e:3a:17:0c:
9d:5f:69:01:0b:cb:09:4d:f1:91:46:58:ed:25:7e:0e:8e:48:
ea:de:4d:b6:61:e0:6d:c2:1b:96:1c:b8:02:2a:06:5a:38:02:
9e:13:90:93:bc:57:ec:59:5b:37:3a:e3:7e:5a:21:d6:7e:bb:
68:23:00:91:7f:d3:db:37:96:96:d3:e0:c1:0d:ef:eb:d8:88:
60:c3:48:8a:9a:50:e2:2c:1d:ff:e3:c2:5d:8a:56:32:a6:f1:
aa:ab:2c:66:63:bd:0b:37:1e:39:65:57:01:8b:a2:ff:c4:44:
3a:f3:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:08 2025 by rpki-client