Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: 3qg1QJTXqTgjm+RfmaKNnP1OHLNHl2LoenRrV3TV0h8=
Subject key identifier: FA:7E:3B:97:7E:85:4F:01:DE:3C:26:42:D0:18:AB:E6:8F:A0:7E:B6
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 019A7301899E91173196AB3B5345AC4B0409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 057C
Signing time: Tue 11 Nov 2025 13:01:11 +0000
Manifest this update: Tue 11 Nov 2025 13:01:11 +0000
Manifest next update: Wed 12 Nov 2025 13:01:11 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: UBDzMXG8QPJP27NfezhXE1N81uRbDaVKJDWoGZuE/3Q=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:89:9e:91:17:31:96:ab:3b:53:45:ac:4b:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Nov 11 13:01:11 2025 GMT
Not After : Nov 12 13:01:11 2025 GMT
Subject: CN=fa7e3b977e854f01de3c2642d018abe68fa07eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:99:77:37:4f:4f:01:36:11:21:de:00:a9:
e0:d9:1c:02:75:e7:b2:40:c9:fc:8a:f4:9d:05:a6:
38:bb:9d:99:9b:bb:ae:e8:d1:af:95:9d:39:2b:28:
a7:3d:b0:da:9f:d2:d7:67:2b:7d:35:d5:de:17:20:
87:46:c5:54:60:32:d2:71:57:4b:61:5b:9f:b1:f3:
45:b6:8f:db:1e:a7:fb:61:f9:5a:64:61:b0:cc:f9:
e4:d6:8a:bc:a1:5c:db:8a:e8:27:d5:7e:5c:ec:64:
b3:0e:ad:28:a0:a6:37:ce:2f:27:02:d6:d7:a4:4e:
fb:98:c1:61:0c:bb:da:69:62:86:72:ea:34:e8:03:
39:d1:15:ce:a5:5d:9a:a4:ea:31:a1:ac:81:49:a5:
fc:76:de:ce:a9:8d:c9:6e:b6:4d:fc:09:9f:ea:64:
49:79:e5:45:9a:14:54:e6:bd:35:3b:66:ec:f0:57:
35:af:37:df:35:e9:5a:c6:34:be:9b:bc:19:20:9f:
97:b2:e6:0a:9d:6b:96:e8:49:e0:10:fa:7f:fc:cb:
e5:a2:5a:38:71:96:98:cf:75:d4:a4:26:c3:2b:5a:
22:c8:86:b1:41:e8:3a:f3:7c:7e:ab:d9:d2:07:ed:
86:fc:ce:46:d7:39:64:60:8d:8b:6c:79:47:0c:89:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:3B:97:7E:85:4F:01:DE:3C:26:42:D0:18:AB:E6:8F:A0:7E:B6
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:f7:f0:a4:c0:7c:eb:ce:cb:d1:8e:b9:a9:62:49:bd:bb:
32:49:76:57:df:bc:25:05:2a:ab:00:4c:44:df:d9:eb:b4:32:
f4:e2:07:ce:7d:a8:be:34:dd:c9:2e:1b:84:0b:cf:a2:39:9f:
98:cf:d7:d6:60:32:57:5f:17:10:71:ca:37:36:e1:94:4b:1f:
cf:69:d0:e3:32:37:05:71:a0:82:a0:b6:61:29:e2:9b:31:09:
72:9f:8a:1b:c1:92:27:ac:cc:8c:41:8c:ee:9b:89:a9:87:dd:
91:f8:c2:e8:9d:75:b0:4a:e0:be:65:60:8b:36:ae:48:09:71:
55:78:c1:71:6a:8a:be:e6:0f:38:05:71:d9:cb:d6:b1:96:c2:
b8:34:ea:cc:a9:08:d7:9d:b8:08:eb:a2:d3:18:07:84:21:5d:
8c:7c:0f:5c:fb:fe:90:9c:81:91:b0:7d:c0:01:f4:17:9f:09:
8b:11:5d:f9:6f:41:28:95:e5:d3:2e:e9:e3:4f:4d:10:0f:17:
59:4f:af:ba:e1:0b:6f:09:cd:1d:68:cd:49:7b:20:36:07:b3:
98:f9:a1:f5:19:48:ef:84:8a:d2:38:0e:23:2c:3b:0d:8a:68:
20:a0:6c:9e:80:f9:19:10:a1:3a:4d:d3:07:f0:14:bf:80:f3:
c0:5f:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:16 2025 by rpki-client