Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: F453oSaMG9lUYDOCfrO0hSXc3bgRsuwKLpnSBOeIVfY=
Subject key identifier: 77:BE:A4:03:4C:30:C8:92:D2:B0:FE:D8:1E:50:A9:7C:B0:2F:69:5D
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019A21E4E88EACAE1A20CACD617E0B555945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0503
Signing time: Sun 26 Oct 2025 19:00:41 +0000
Manifest this update: Sun 26 Oct 2025 19:00:41 +0000
Manifest next update: Mon 27 Oct 2025 19:00:41 +0000
Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=)
2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=)
3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=)
4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: 41e2ed6+vtEgPyyPjL/lcIdFgiRWcno8WnuMuVWVFY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:e8:8e:ac:ae:1a:20:ca:cd:61:7e:0b:55:59:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Oct 26 19:00:41 2025 GMT
Not After : Oct 27 19:00:41 2025 GMT
Subject: CN=77bea4034c30c892d2b0fed81e50a97cb02f695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:79:0d:ca:3f:eb:44:af:bd:f7:a4:7d:97:
a0:de:49:b4:e8:89:5e:24:ce:b4:af:99:77:48:d2:
5b:71:bc:c5:39:cf:cf:ec:49:15:79:b0:5d:f5:3c:
5c:0d:d3:dd:4f:30:db:e0:62:34:54:ff:53:4a:af:
61:fa:cc:f0:7c:03:f2:7d:dd:b9:9f:6b:c4:57:98:
56:a4:23:26:cf:1f:bb:ad:6a:64:3d:56:0d:8a:dc:
43:bb:c5:bd:82:6e:07:05:8f:0c:5f:0f:d0:73:20:
67:8b:86:1b:f3:ca:6c:78:68:1e:17:f9:1f:cf:a3:
2d:68:a6:7d:ca:df:64:06:2d:6d:ff:88:c1:bf:cc:
43:00:a9:a0:14:ee:33:2e:8f:c1:b1:45:70:0a:a6:
d3:42:8b:90:c0:b1:53:29:85:ac:c2:e1:dd:02:be:
7e:c2:9d:bf:1b:48:19:5d:1d:c7:e2:3a:44:b1:b1:
c9:a5:f0:69:99:e1:a3:11:9e:ff:ed:38:da:61:1f:
b0:70:3d:6e:80:37:92:c5:18:4d:d0:7f:03:e7:71:
fe:b6:7f:ca:8c:ad:df:2a:6e:32:ee:9f:eb:32:aa:
f0:39:13:5a:60:fa:92:1b:f2:33:77:0d:83:a0:7b:
33:89:a9:d4:c2:32:0a:34:a7:ef:c7:43:6b:4a:45:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:A4:03:4C:30:C8:92:D2:B0:FE:D8:1E:50:A9:7C:B0:2F:69:5D
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:03:e2:71:10:1f:85:ba:3d:30:94:d4:4f:ab:7b:81:65:2c:
b2:3d:85:a2:d3:47:aa:b8:ac:91:55:94:a7:5b:0c:94:c1:23:
50:b9:63:41:e5:55:a1:72:b3:b1:be:ef:9f:78:dd:60:77:59:
eb:f4:66:5a:46:ba:c4:c4:8c:07:2f:d5:6b:aa:e1:dd:b2:00:
24:0d:1d:e6:8f:e3:d0:ba:85:a5:a5:7c:a7:19:b5:33:f4:d7:
cd:57:bb:4c:d7:e8:e2:ab:8f:6d:a9:76:a4:2e:21:fe:44:9c:
ca:89:59:47:ef:77:8b:fc:37:ab:88:69:97:43:5d:1b:27:eb:
d1:20:e0:e1:17:a1:aa:4d:7c:37:dc:5f:aa:1e:0e:d7:ad:6e:
6e:52:60:21:ca:47:8e:1f:3d:84:a5:e3:c0:9f:33:34:a1:e3:
ac:7a:97:5b:d4:5e:92:0d:7c:e9:a3:7f:6e:06:97:9b:3c:de:
e4:6e:65:39:1f:b9:66:ea:0b:11:f3:15:fa:80:f1:ff:1b:ab:
eb:53:db:e3:00:ba:4e:3a:7a:43:bf:19:44:94:d1:7c:07:95:
76:c6:ec:b0:ce:04:5d:2f:04:5f:9f:7e:ef:dc:ff:8b:25:1b:
2c:95:8e:db:cf:04:26:ec:1a:80:52:98:28:1c:27:02:6d:c1:
a2:42:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:31 2025 by rpki-client