Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: RGAbXxwrA5MNN5OL7I7Xs/Hifwg0JI/6VncOLB461tg=
Subject key identifier: B8:EE:8D:13:20:9F:91:6A:4A:88:EC:A3:18:0D:39:BC:35:6E:41:66
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019A71B833F7533CCDB9EE91E8F56D6AD533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0382
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: HQSOptWU1aakyFI4bQER67n45DFYjzB494u23qX9RvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:f7:53:3c:cd:b9:ee:91:e8:f5:6d:6a:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=b8ee8d13209f916a4a88eca3180d39bc356e4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:f7:8d:8a:ab:b6:29:0d:06:fb:bd:2c:a1:
5b:fd:86:84:9a:b6:e4:63:79:23:59:0f:a0:1a:33:
6b:cf:b2:54:bc:23:f1:c2:a6:88:6c:2b:0b:8f:dd:
b1:89:88:79:c3:67:94:5c:67:d9:51:98:31:ec:04:
a6:9a:7a:95:8b:dc:1c:1b:29:b4:ae:10:4f:35:80:
77:a5:72:11:b6:c4:bc:f9:c9:9c:4c:07:9f:64:5f:
c9:3e:32:b6:2b:f2:4c:cd:ff:f2:f1:0d:46:72:f0:
c1:eb:f7:32:d9:24:75:0b:57:ee:9c:bb:c7:75:b5:
56:35:bf:02:4a:9a:e5:7f:e1:97:74:01:17:db:d9:
2f:1a:01:f6:77:bb:7d:db:f5:79:91:f6:74:8e:01:
2f:08:e5:53:5b:44:b7:a5:22:0a:7d:d7:c0:bf:09:
b8:19:e2:2c:c0:51:4c:40:59:c8:a7:cc:c5:0c:50:
3b:d7:12:ae:cb:d6:83:eb:59:57:ed:89:ae:df:e1:
04:df:fa:3f:44:2a:c4:c6:c7:e5:03:75:5c:0d:d5:
3f:0a:fd:03:1b:61:29:48:ab:7f:48:6a:d9:8c:d8:
be:68:c6:c0:ad:ff:a6:8b:2e:96:3e:e3:05:bb:36:
60:e8:18:9f:7a:e9:72:ea:c0:23:99:9a:69:58:2e:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:8D:13:20:9F:91:6A:4A:88:EC:A3:18:0D:39:BC:35:6E:41:66
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:fd:d8:cc:d7:9b:b1:7c:03:cb:19:42:1b:13:c5:e2:09:
18:6a:df:38:b9:78:bb:e7:a7:89:fb:93:fc:da:bf:7f:4b:a3:
fb:56:f9:df:46:95:9a:70:9f:97:aa:5d:93:b5:d0:32:69:cc:
33:75:8c:19:8a:38:7a:59:53:6b:b1:3b:2b:3e:ca:0d:53:21:
b2:34:4e:7a:58:38:92:9d:02:94:f2:b7:d6:70:fe:48:46:9a:
4b:93:7d:9f:59:f2:57:8f:33:5e:78:3a:d2:60:64:55:5e:e0:
96:c4:59:d9:38:7b:ff:48:3f:65:23:6d:60:15:8f:65:30:02:
48:a2:9f:22:fb:e7:56:62:73:e3:51:78:8f:e2:bf:65:51:4f:
04:ac:76:fb:6f:55:38:7b:45:01:6d:cc:ef:cb:ab:d9:17:b6:
7c:31:77:8a:60:a4:0d:cb:04:a4:12:ac:37:f4:f9:27:12:c0:
05:4b:74:1a:3b:52:dc:6d:33:22:88:0a:10:51:1b:52:0e:23:
2c:33:a2:54:3e:89:c6:fd:b4:14:f8:e1:5b:c9:79:7f:94:c0:
b8:9c:e6:bf:17:0b:70:71:2f:f5:0e:b1:99:5b:62:9d:79:1a:
8c:8a:4d:97:77:40:f5:45:1d:33:3e:14:a9:fe:38:63:7c:f5:
87:44:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:00 2025 by rpki-client