Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier: dqGe7KctTjcRpWc2xUe1HgJWB7tkSR+Yp2gzDdVhI8Y=
Subject key identifier: 7D:D0:A0:9A:AB:02:26:A9:23:04:42:B6:F0:7C:25:28:BD:C4:0F:5C
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 019A718088B6B2E641592120D1A7F7F9FEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number: 012F
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: lbprdFEFuXFke0vDmp9ib+/VMFOVZUiYU/zGnQpgU0I=)
2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:88:b6:b2:e6:41:59:21:20:d1:a7:f7:f9:fe:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=7dd0a09aab0226a9230442b6f07c2528bdc40f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:c0:e8:8e:e1:c1:c3:de:d5:22:21:95:32:
d4:93:dc:2f:89:15:4e:e6:18:9d:bf:51:28:d7:14:
25:6d:3a:f2:aa:0e:0e:6a:72:c5:7e:88:ba:dc:21:
97:6e:aa:a8:ca:05:42:c4:e9:4b:9e:38:8a:e4:48:
97:04:01:70:f0:d7:47:fb:27:31:0f:c6:e8:c4:a6:
28:e9:31:7f:90:aa:ac:dd:fd:4c:28:99:46:40:41:
82:78:e7:87:87:d3:ce:44:60:a5:a1:84:61:f2:2b:
a4:39:5a:70:25:88:fb:22:1a:22:50:26:3f:ad:95:
85:f5:7a:7f:d2:06:d1:f9:d4:ca:39:4f:f2:df:87:
4d:e5:4a:83:11:5e:cf:68:c2:a8:d8:07:80:2f:00:
36:b5:ce:38:aa:61:20:28:47:69:5f:35:fa:a9:40:
83:88:d0:d2:94:d3:7c:b2:5a:e5:23:80:bf:76:05:
ef:3d:cb:74:c1:a4:42:65:b2:a4:45:95:9a:15:af:
39:06:1d:2c:e8:c1:06:d8:a8:30:61:fb:3f:89:88:
48:ec:9e:15:ba:a7:ae:35:44:3e:43:b9:e0:f3:34:
72:0b:af:b8:4d:c1:fa:9e:dc:28:0e:02:a7:03:b9:
16:c0:f9:fa:01:f7:64:4e:35:f8:f9:3a:f5:4a:d3:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:A0:9A:AB:02:26:A9:23:04:42:B6:F0:7C:25:28:BD:C4:0F:5C
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:42:c0:93:f4:3c:72:55:d4:f9:3b:1d:81:11:c7:80:a5:36:
0d:56:3b:c7:05:65:d9:06:a8:5d:2a:ac:ae:9c:b2:47:86:66:
d9:de:e6:fb:ac:83:ee:48:5a:4f:7b:76:e2:ce:b0:60:0d:71:
99:a2:f4:4a:48:1b:7c:61:82:b2:ff:d9:e8:73:fb:d6:53:51:
cf:2f:e4:e4:c4:c8:78:d1:ee:68:67:4c:e7:72:d6:e4:87:a5:
c3:5b:93:e3:95:51:ff:ca:9f:b4:35:ec:d6:2f:32:8d:b2:24:
5e:52:25:16:7f:59:ce:4a:49:14:46:3e:54:06:2d:71:b9:44:
24:58:62:0e:b7:05:a3:ba:7a:05:e4:47:54:6a:1d:fb:62:09:
42:94:47:30:96:5a:ab:96:24:ae:dc:54:54:ec:71:eb:77:26:
96:11:7a:81:88:a0:22:ce:5a:de:f6:ea:bb:62:01:f0:52:6e:
7a:f9:87:e2:bd:95:92:aa:89:08:aa:b1:c3:68:34:00:c9:e3:
2c:e1:80:35:39:43:95:60:0d:eb:93:a1:7e:20:4e:18:57:9d:
09:11:82:56:a2:b0:66:33:66:d4:da:49:5e:61:ac:70:a1:04:
81:cc:e6:7e:24:2a:5d:47:69:d9:6a:03:aa:ac:26:b2:0f:17:
55:b2:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:49 2025 by rpki-client