Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: O+0h/Ka583YKIUVuFHB+nMr577SucU1oJbhsshrt8X0=
Subject key identifier: 81:8D:0D:1D:28:76:D1:CE:04:CB:8C:3C:D6:83:09:77:94:F8:38:7A
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 019A255374E325C44B8A0EA8009C0D1E7826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 1409
Signing time: Mon 27 Oct 2025 11:00:17 +0000
Manifest this update: Mon 27 Oct 2025 11:00:17 +0000
Manifest next update: Tue 28 Oct 2025 11:00:17 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: Vlsjub3iZQzQkLLf5dYuKbVPc4IA96H5JPTInGXKlUw=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:74:e3:25:c4:4b:8a:0e:a8:00:9c:0d:1e:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Oct 27 11:00:17 2025 GMT
Not After : Oct 28 11:00:17 2025 GMT
Subject: CN=818d0d1d2876d1ce04cb8c3cd683097794f8387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:6e:a4:d5:7c:7b:ac:80:42:03:48:fe:48:
c5:ca:a3:08:e4:b9:a5:4b:a5:cb:c5:4d:c0:9c:bf:
8a:8c:2f:2a:2e:fd:21:c2:6d:9e:8b:32:24:b1:e4:
d2:ce:44:0f:99:77:5e:10:b9:49:70:eb:62:14:70:
f5:aa:c9:65:78:ab:12:27:5d:5f:ca:f1:3d:08:9b:
0f:ee:fb:0f:51:d4:30:57:53:c7:41:ad:8c:a7:27:
56:a1:5a:0f:25:94:4f:71:66:30:39:fd:9e:5f:b1:
68:83:e3:46:87:0d:28:0f:4d:e7:aa:db:35:2a:8f:
48:77:52:37:2b:9b:b5:75:f4:c4:ca:aa:6f:f8:5f:
a7:44:78:d2:ea:5c:4a:3d:29:5c:40:4d:cc:2e:7d:
10:08:2f:f1:5a:b3:e5:5c:17:32:83:e2:04:4a:fd:
bf:5f:97:76:97:15:9b:6a:01:6b:60:4e:85:c2:4d:
2b:ef:d0:56:db:26:29:3f:74:67:8f:f5:da:04:e3:
49:cb:94:69:9b:c5:88:df:23:0b:97:c4:f6:a2:c5:
e3:01:ab:f7:a8:36:3a:0a:d8:2f:16:a0:9e:02:b0:
11:2e:1d:e0:85:0a:7d:43:85:08:b6:de:38:f3:d3:
71:d1:df:ec:f3:26:13:4f:cd:f0:ff:61:fe:c3:82:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8D:0D:1D:28:76:D1:CE:04:CB:8C:3C:D6:83:09:77:94:F8:38:7A
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:97:99:17:49:46:99:d9:95:2b:33:f3:97:62:72:2d:12:
fb:d9:ee:93:0b:e6:aa:9b:9b:2f:06:20:7a:48:d5:26:58:d4:
e7:6b:72:85:19:a2:5c:69:d2:a9:84:21:c3:ef:42:64:77:98:
31:fa:be:47:0c:f8:02:79:59:16:6b:d2:4a:33:82:19:94:54:
e2:56:fa:74:26:33:b0:53:84:1b:a5:dc:0a:2e:b1:ef:6b:8f:
00:be:b9:bc:79:fe:c2:ab:11:f2:f2:f1:9f:bb:18:7f:9a:e1:
3b:34:1c:7d:86:aa:c6:13:81:a5:17:33:48:c4:c3:18:12:f8:
50:ba:a1:80:bf:87:1f:cd:ae:9f:6c:be:ad:58:d3:85:d5:75:
ed:b0:16:7f:aa:76:1d:67:2f:b2:83:ab:cf:9b:fc:52:0e:f1:
32:8a:53:cb:2a:77:8e:8b:8d:94:a2:a9:fe:2d:cc:81:69:1f:
25:90:57:38:17:3e:61:fa:6b:58:3a:2c:6a:5d:99:e0:87:89:
76:f7:6f:0a:bd:98:0a:1c:29:5c:f0:55:f1:38:78:9c:45:63:
d9:be:09:a9:82:2c:00:c0:dc:37:d6:bb:2f:2e:d0:65:87:28:
5e:5a:63:a8:0b:d9:ce:4d:37:5e:bd:99:fd:43:6e:9f:a4:71:
f0:b7:e7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:53 2025 by rpki-client