Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: ulqfj5GI6hWKGVYSaIP44ciTmIQW4bXSQJojTy9FWIU=
Subject key identifier: 3F:8F:DA:62:5F:A2:19:33:49:D6:2F:C7:4E:46:A5:4E:09:8C:9F:84
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 019A71B9237E0C84CDA355D294E164B98F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 061B
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: 9ICGn1gzMTX6tEGZmfEx16JG7jF04ewr53j3sXoIKkk=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:23:7e:0c:84:cd:a3:55:d2:94:e1:64:b9:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=3f8fda625fa2193349d62fc74e46a54e098c9f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:27:d4:f1:f7:87:b5:c2:c0:eb:21:9d:51:
29:72:15:56:a4:27:ca:33:47:ba:80:01:e8:05:18:
b0:9f:e2:1e:f5:7c:e0:3e:df:52:e6:6b:13:1f:37:
f8:7e:6a:27:29:68:29:d5:bd:9f:db:ee:14:46:c4:
32:9b:d3:87:cc:e4:e4:ff:90:b8:0c:67:89:6e:65:
fa:15:ee:2a:c6:90:4f:5a:97:d8:c3:05:c2:af:65:
40:a4:c8:38:a0:d0:a1:97:bb:b4:93:40:e6:1b:62:
dc:2a:50:eb:5d:c5:30:ff:f7:97:d3:62:15:1b:db:
79:ef:fe:25:d8:04:b9:bd:58:93:3d:4d:d3:70:fc:
a2:71:f6:e7:f9:fc:a3:46:0a:e4:96:d8:6e:ae:ed:
11:08:80:f6:f1:b4:8e:74:87:a4:d7:cd:95:ad:a3:
e7:02:38:ec:ae:09:d5:f8:34:62:b7:e5:88:8e:f3:
23:97:6d:40:ad:13:bd:c0:5c:e0:42:ac:69:04:94:
b9:b6:9d:25:0b:c6:05:88:f6:6d:96:5c:c2:83:8d:
b9:44:de:1c:a1:6c:1c:56:a3:8b:18:e3:38:fa:d4:
4d:8d:5f:6b:79:49:49:ec:15:4f:57:5e:87:56:96:
b9:72:73:82:02:b6:77:59:57:a8:ae:90:26:2b:fc:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:DA:62:5F:A2:19:33:49:D6:2F:C7:4E:46:A5:4E:09:8C:9F:84
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a3:84:e6:44:33:ca:d8:e2:48:89:18:f5:38:7b:ed:0c:5a:
cc:7b:99:f3:83:23:c5:a7:31:33:6c:44:5a:3a:0d:8c:bc:11:
fd:b2:0e:0c:91:be:42:1b:8b:f7:ce:23:67:14:af:07:51:84:
af:aa:c5:59:64:c6:e9:15:b4:09:10:83:74:6d:b2:f3:be:48:
03:45:fc:e1:bd:5d:f6:74:88:a3:11:67:51:fc:27:84:5d:f4:
02:83:31:ff:c5:d2:e0:38:40:87:d9:a6:12:d0:eb:c4:3e:cb:
a0:4c:3a:10:88:24:b0:f0:f6:8b:38:1c:4a:57:f4:7b:1b:81:
a0:99:c7:b5:0a:33:b2:f8:fb:7c:fa:d3:60:70:05:a8:63:c6:
83:ab:84:50:91:9e:b0:a9:ad:1f:1f:26:3d:31:3a:65:e1:05:
43:7a:42:d2:67:5e:3f:d8:4f:c6:3a:11:a7:a6:1c:85:da:7e:
5e:a9:63:27:11:53:03:99:88:b1:f9:eb:72:49:7a:cb:88:fd:
ad:11:66:24:f6:65:f9:22:7e:db:4e:63:2d:9a:41:e1:4b:76:
0a:18:80:16:eb:9f:d6:cc:e9:f1:62:dd:5e:9d:58:98:09:4a:
50:5e:e5:f7:cf:77:4a:a4:4c:64:aa:e9:df:aa:3e:51:30:a3:
20:ed:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client