Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: g4YtE/XDms3KF+jbGJn94EHsDphWuNPQRlX1na6+EiM=
Subject key identifier: 4C:2F:48:70:C4:FF:A2:7D:48:F0:5E:FB:B5:F7:41:34:7A:04:85:AF
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 019A7113619272A74A66E55450678238B9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 04CF
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: JrOH2AjAfdp6BmPdXoMX2QOLqf7WG5XzyrLWffizs1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:61:92:72:a7:4a:66:e5:54:50:67:82:38:b9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=4c2f4870c4ffa27d48f05efbb5f741347a0485af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:ac:83:17:4f:75:9d:0b:cf:8e:b8:8c:0e:
cc:aa:cb:d7:ba:ed:11:18:11:d5:55:eb:77:63:22:
70:e5:d3:f3:ff:58:46:b0:23:a9:6e:11:bf:2e:32:
f3:9a:38:72:3a:76:f9:d0:a3:85:2d:8d:6c:48:c9:
a0:4b:5e:3c:80:92:4f:d6:36:82:86:3d:5d:6e:93:
85:cd:9f:e1:a1:76:fc:f1:08:9f:ee:ea:ee:ab:0f:
7e:a4:ec:2c:9e:c0:0c:7e:e0:b1:48:69:87:f4:5b:
73:24:65:31:fa:4b:ef:c6:15:a3:ed:02:25:9a:3f:
01:13:55:c8:79:d4:5b:e7:41:8d:2d:81:ce:bc:7a:
7d:c7:70:9e:5f:0a:c4:3d:40:f8:99:62:e5:e7:fc:
d5:00:b3:8f:a9:1d:e1:8c:93:57:b8:53:61:78:30:
87:f9:ee:fb:a8:e1:82:8c:4a:c9:7f:6e:ff:f1:05:
f2:92:97:60:7b:13:34:22:8d:14:3a:ca:da:fd:22:
b5:c6:51:26:09:e7:00:26:3a:cd:4b:db:68:23:3d:
e2:b5:c0:d3:e9:a2:a6:02:3c:45:03:28:cb:77:79:
74:22:0f:e7:a1:a9:b7:f0:29:b3:76:35:22:e7:64:
63:9d:2b:35:9d:01:45:c1:e4:50:a3:70:31:d3:b9:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:48:70:C4:FF:A2:7D:48:F0:5E:FB:B5:F7:41:34:7A:04:85:AF
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5b:43:ad:5c:db:4b:2d:f3:24:80:29:8c:a9:45:5e:3f:d8:
91:e3:cc:f6:2c:5e:db:72:c2:05:e3:30:ba:36:02:47:08:7f:
68:6a:10:fe:48:08:38:b4:8c:96:3e:37:6d:74:6e:f7:20:71:
9c:d3:b7:e6:97:73:ff:10:a5:50:29:89:9b:8d:5e:4e:e3:b3:
61:ed:2c:84:32:e0:5a:0d:d0:53:e8:12:b3:17:f6:16:f3:76:
10:96:a6:6f:11:41:95:dc:a9:4c:37:85:90:ef:2d:5b:33:ca:
79:37:57:1e:c2:9b:53:41:7b:7f:7f:71:90:09:4f:c0:8f:0b:
a9:4f:30:e6:cd:a3:6a:b1:ce:43:28:14:06:0a:d1:f3:fa:5a:
e1:39:53:dd:1a:f3:f3:c2:e6:97:16:fb:10:5a:82:08:76:fa:
66:25:ad:1a:b5:5b:c4:11:26:11:e2:44:f3:fe:f8:7c:a2:a7:
1b:62:31:bf:ec:c6:a6:ac:51:7e:0d:8b:d6:da:49:91:81:6c:
9b:f4:2c:c2:8a:d2:ed:41:a9:bc:55:55:d8:dd:43:e0:08:c2:
d7:c0:ed:39:63:a3:16:c6:72:1a:e1:a9:c7:31:63:39:3a:e4:
6a:36:97:ba:9f:0d:07:71:01:6e:1e:86:d9:64:be:54:ba:4a:
0b:a9:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:06 2025 by rpki-client