Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: OeKSJA+OlAiql4nszVXpYwPzeVffTtxVj+5QQFgtk+Y=
Subject key identifier: 3C:F0:DC:F9:89:DF:ED:43:BB:1A:CF:71:98:1F:C4:6D:02:4C:A4:F2
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019A73380CA6F43DDA5891415663F611687F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 140D
Signing time: Tue 11 Nov 2025 14:00:44 +0000
Manifest this update: Tue 11 Nov 2025 14:00:44 +0000
Manifest next update: Wed 12 Nov 2025 14:00:44 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: nljMRWJOWEf5Dw+UjS/O8dtslqULUh0e8l1lWhcoMuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0c:a6:f4:3d:da:58:91:41:56:63:f6:11:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Nov 11 14:00:44 2025 GMT
Not After : Nov 12 14:00:44 2025 GMT
Subject: CN=3cf0dcf989dfed43bb1acf71981fc46d024ca4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:a0:ab:12:2c:81:03:3e:a0:89:c9:1c:83:
2b:41:2e:fe:20:12:ee:19:62:5d:a7:f1:8c:fc:5f:
5c:ae:35:05:b8:a8:15:39:53:34:1f:07:69:30:21:
ad:6f:d7:5f:43:7a:08:5e:1a:a1:1f:7e:89:0b:48:
5b:91:2e:78:5e:a7:ae:d1:0b:a5:7e:27:19:80:fe:
86:da:d6:12:32:ba:89:ac:c8:b4:f7:24:1e:94:f9:
5e:75:ba:83:34:dc:71:75:41:bd:23:30:ca:52:67:
af:e9:09:fa:1d:93:0d:9a:0b:57:49:7e:17:be:e4:
8e:b5:26:43:14:f1:a9:db:3f:6f:af:52:c2:2a:06:
4d:c6:dd:89:35:8a:5d:aa:cb:6c:32:ba:13:72:c7:
71:4f:61:46:7e:4b:c0:19:c3:25:0a:d3:01:73:11:
2c:49:b4:04:66:a6:03:5f:dd:e2:af:9b:0b:e0:f0:
b8:d0:9f:2e:f7:fa:ab:a7:f5:7a:75:e1:a7:c3:42:
58:1d:44:9a:79:b7:a8:a2:1f:1e:ed:64:6d:48:5b:
59:c0:23:f2:5d:07:9e:8a:e0:d7:91:ac:96:ab:80:
34:b9:02:58:d2:96:6e:7b:b0:62:10:36:36:8d:13:
62:17:48:a4:b2:e4:30:d5:ba:00:58:ff:76:28:0c:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:DC:F9:89:DF:ED:43:BB:1A:CF:71:98:1F:C4:6D:02:4C:A4:F2
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:ac:25:04:dc:ef:3e:71:37:c6:43:ab:36:c7:ff:2c:8c:
3d:fa:a5:bf:d2:24:51:e7:75:6a:38:99:ad:8c:b0:fa:1c:ec:
e2:d7:1d:ef:a7:1d:e7:c0:b5:5f:a1:15:45:e9:18:ea:5e:8b:
18:8c:ef:e3:8f:3e:b5:06:9b:de:e1:85:9f:60:ca:d3:0f:40:
4d:77:39:7a:b1:db:67:ac:b3:db:f3:23:1c:a2:1d:92:3f:ba:
b6:8a:ee:39:3e:3d:23:22:6f:2f:81:d3:a2:b9:55:8f:9b:ec:
bb:9c:66:98:e4:2c:0b:b5:8e:bb:c0:3c:03:ab:5e:c4:b6:d9:
68:03:a5:9b:7b:50:c5:35:cd:ff:57:9b:fd:8e:07:9f:78:e4:
84:ef:9f:64:9f:0d:dc:5e:51:5d:2b:4d:96:11:ca:0e:a6:c0:
21:b6:f2:67:84:06:5a:48:4b:1e:d8:b2:b1:86:ed:ba:d0:48:
10:31:1a:7a:b9:74:e2:48:7b:9c:f7:32:dc:02:0d:b8:c9:c7:
50:02:09:e8:8f:6a:b7:88:fd:a6:67:66:8e:df:bb:26:24:c7:
18:72:50:82:74:af:0b:b0:c8:ae:0c:ac:7c:4d:ea:1a:95:5c:
50:40:a8:5b:1a:2c:2a:97:53:90:f1:32:8c:8d:61:64:eb:36:
d9:8f:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:25 2025 by rpki-client