Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
File: K4GVFfOZ60LIAx876kqYyOKJ4e0.mft (raw, json)
Hash identifier: fV4Kom2MC962NmDVvYG0xylv0Qf7+AKDaPdSOFhgbOo=
Subject key identifier: FE:FA:7E:9C:84:E9:D9:75:3A:8B:CD:85:7F:6C:E8:56:40:55:A7:A8
Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
Certificate issuer: /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Certificate serial: 019A72CAB3ABEDF34487461A941338D1C9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
Manifest number: 0154
Signing time: Tue 11 Nov 2025 12:01:18 +0000
Manifest this update: Tue 11 Nov 2025 12:01:18 +0000
Manifest next update: Wed 12 Nov 2025 12:01:18 +0000
Files and hashes: 1: K4GVFfOZ60LIAx876kqYyOKJ4e0.crl (hash: 53njLC/1Xser5N9LanfMjqze3zKqbTXPQLN65z+d9sw=)
2: MRY6fM9QiSsubyguz4kspQmishA.roa (hash: /78lcK4sMBWDJAqkZAAF4XGGhpfWKl2tLUozc3wFeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b3:ab:ed:f3:44:87:46:1a:94:13:38:d1:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Validity
Not Before: Nov 11 12:01:18 2025 GMT
Not After : Nov 12 12:01:18 2025 GMT
Subject: CN=fefa7e9c84e9d9753a8bcd857f6ce8564055a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:83:bc:40:eb:62:a3:29:4e:c9:47:64:ac:
b9:e9:78:c5:6e:ab:71:16:01:2f:b7:36:6c:c7:0f:
71:92:33:7f:ca:73:46:8f:0d:54:95:c0:36:4d:34:
96:82:0f:3c:cb:eb:e9:ef:37:c6:be:b8:33:ba:66:
8b:43:a2:e1:cc:5b:15:12:7d:08:e9:a0:9c:d2:80:
ea:4f:a9:05:05:14:48:00:69:9d:41:2b:29:e6:a0:
fc:84:a1:78:e8:28:6b:5d:5f:ff:b0:95:e5:28:1c:
05:c5:b0:ec:28:4d:53:a2:4c:75:3b:61:76:69:28:
04:1b:01:da:e8:84:3e:ee:bf:14:af:f4:ad:0d:78:
ea:25:89:a3:2f:1e:0e:83:19:29:37:3f:1e:a7:12:
34:a3:a4:82:43:d2:79:ba:56:a3:ec:80:91:75:af:
d5:fe:04:ff:32:7b:00:e7:5e:20:b1:08:a9:41:e1:
c2:81:bb:ba:36:b9:c0:2f:0e:fd:ac:9e:22:39:45:
56:6c:78:19:84:23:a7:13:f3:aa:a1:1d:b1:c2:72:
11:05:28:ae:f9:05:49:54:da:5e:d3:15:df:77:90:
86:2d:d5:fb:64:10:33:a2:43:f1:b5:76:7e:1e:8c:
ac:12:d1:6d:78:a6:19:d7:20:ef:f7:f9:64:8f:95:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:7E:9C:84:E9:D9:75:3A:8B:CD:85:7F:6C:E8:56:40:55:A7:A8
X509v3 Authority Key Identifier:
keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:24:a5:20:5e:fd:a7:42:62:c6:d9:27:38:36:e9:e9:1f:55:
2a:1e:34:75:9b:73:4e:df:f7:f9:bf:b8:86:1d:a2:c8:dc:97:
b3:09:0f:36:4b:c5:fb:48:89:bb:2e:41:5b:65:0b:e7:29:1b:
29:28:54:5d:69:56:ea:f0:72:e6:a8:8d:b9:2e:06:ef:05:1b:
29:3e:d1:6b:dd:6e:b4:26:7d:34:9c:63:8a:60:2f:59:bb:62:
1f:76:6c:8c:82:93:29:0f:d2:ab:c8:27:31:66:cf:7b:d1:41:
cf:ed:2f:a3:5f:f6:18:9b:53:42:27:b9:0e:ae:fc:a3:c9:c7:
54:2b:45:e1:e3:62:32:0e:9a:d9:e1:51:0d:9b:18:77:66:ee:
cb:35:5c:58:49:78:ec:be:4f:6e:ec:8f:14:08:f0:42:70:d6:
20:19:1d:ff:08:48:61:c9:36:68:5a:b2:95:a3:50:cd:eb:c4:
9d:bb:d6:bd:20:6c:61:60:80:a1:a5:48:2d:f0:40:bc:db:ad:
2c:e3:c1:12:d9:73:f5:25:43:2d:7d:e8:bb:78:f7:d4:6f:f5:
ed:89:0f:56:d8:83:90:1a:e9:d1:e2:80:a4:05:bf:3f:31:06:
92:ae:78:3a:ca:3a:bf:d7:83:6f:79:24:04:dc:d5:95:f4:9c:
fa:23:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:04 2025 by rpki-client