Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: gZdamKNAv+o5/EZe5P72j2925V4I13EkpH+EZKQkbHA=
Subject key identifier: 88:DA:D7:92:1D:09:F2:BC:FA:86:94:CF:FF:00:A2:BD:74:45:EB:F1
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019A2E205CB7C75A77947AA54DBD546DF333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0B73
Signing time: Wed 29 Oct 2025 04:01:04 +0000
Manifest this update: Wed 29 Oct 2025 04:01:04 +0000
Manifest next update: Thu 30 Oct 2025 04:01:04 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: FEz436unCIUgsX3MHAA/QIAPVTEi+8Be8wItgkB9hlE=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:5c:b7:c7:5a:77:94:7a:a5:4d:bd:54:6d:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Oct 29 04:01:04 2025 GMT
Not After : Oct 30 04:01:04 2025 GMT
Subject: CN=88dad7921d09f2bcfa8694cfff00a2bd7445ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:7c:72:11:64:10:19:cd:32:ec:12:b7:54:
94:97:ca:c3:b6:10:e2:e4:0c:79:bc:99:65:65:70:
cd:da:85:0a:4e:80:48:5a:c1:7e:57:63:e6:dc:c9:
b4:53:2a:67:f2:71:39:00:9b:d3:9f:6d:a9:e4:fc:
d1:d8:51:41:b2:5e:e9:a5:6c:d5:5c:a7:7b:88:75:
47:dd:a9:93:d3:b0:d6:cc:a4:1d:35:1e:7f:ef:2e:
15:05:97:2d:c1:b9:15:57:2b:ce:43:12:2d:22:81:
e5:e6:4c:30:84:4a:cb:4a:b5:e3:de:1a:ae:05:b0:
be:c6:7d:62:f8:31:a7:6d:11:d9:17:84:0b:ca:f3:
f9:54:bc:5e:81:78:22:a2:ad:d4:4f:20:2b:22:8e:
8a:b0:4b:6a:b3:04:9d:0b:a8:2d:6a:e8:94:bb:79:
0b:63:1e:17:be:83:0f:78:a7:8e:72:b1:7d:fe:11:
40:56:2b:02:89:c1:ce:61:3a:f6:97:d3:54:ce:59:
c2:8c:fc:3f:d4:ce:e2:7e:7c:89:39:9e:72:8b:d6:
c4:09:91:dd:35:f8:23:12:45:5c:87:de:43:ab:6a:
b5:4d:30:ea:52:0c:ea:61:77:79:91:87:e8:2b:aa:
ca:18:f5:ac:a2:7d:c0:8b:a7:80:c9:7d:c3:de:72:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:D7:92:1D:09:F2:BC:FA:86:94:CF:FF:00:A2:BD:74:45:EB:F1
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:91:65:d9:34:0f:d9:ae:08:a3:80:6a:73:5b:f8:1b:73:
a1:c1:3a:fe:6a:93:30:a5:44:95:86:63:20:8f:85:ee:3e:d6:
56:ac:40:1b:87:62:2c:58:51:a0:73:23:0e:61:3d:8c:4d:44:
da:ce:9f:56:dd:5f:30:5c:b7:9c:77:c1:2b:f8:ef:40:41:96:
83:d3:17:1b:d1:02:df:34:3d:a9:ea:67:b3:c7:7c:54:c4:a5:
e7:b9:47:86:37:bc:37:58:e1:4b:d2:58:64:84:f4:70:bf:55:
32:0b:46:40:9d:10:59:4d:5d:e0:11:8e:22:7f:3e:a9:eb:98:
a5:ec:ed:40:c1:d0:a1:db:6d:19:6f:40:99:57:d9:49:5c:54:
4f:a0:dd:3a:76:95:b3:66:ec:c4:e3:d2:f4:a9:bc:f7:73:a4:
a6:17:f5:84:7f:9a:4f:a1:2f:42:d5:a6:cc:9f:e0:ae:03:17:
97:4a:58:bc:c7:01:7e:40:c6:d5:cf:e2:9d:15:37:be:89:43:
6b:15:22:56:3c:1f:4e:ba:db:17:c4:89:4a:bb:d0:19:16:63:
ee:98:ce:0e:9e:5c:f1:9b:a0:cb:99:d3:20:37:d9:3b:ea:ad:
87:0f:7a:00:d7:2f:c7:95:27:b8:11:63:3d:94:2c:b8:38:7c:
d8:2d:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:39:56 2025 by rpki-client