Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: kI7GB8hHVdl4uNjgMqxMLf5lup9R+9czSxYXSxPOOjI=
Subject key identifier: 1A:88:D6:A1:57:7C:D2:DC:85:43:4B:6B:6D:1D:1E:99:F4:78:50:35
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019A714A2F61FBB27581C6434467046FB7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 121D
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: IMxSsE6j3Kyla0l/UtlfowjZTMSrQgxQhPByA346rRc=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2f:61:fb:b2:75:81:c6:43:44:67:04:6f:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=1a88d6a1577cd2dc85434b6b6d1d1e99f4785035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:95:10:c6:e2:67:0f:3a:9c:d9:ca:a4:d8:
70:09:b5:1e:01:64:d5:32:fb:c0:4f:db:01:aa:b2:
dd:32:e4:02:f1:37:cd:38:48:24:35:14:94:93:42:
f2:ef:31:12:54:0a:8d:12:96:3f:16:32:cb:e0:d2:
31:7d:53:36:b5:75:f3:e1:79:31:07:1f:28:bc:6a:
8b:71:52:06:ba:85:9b:23:06:8a:da:ff:e6:25:3a:
87:7d:50:1e:85:cf:b7:e0:75:27:ae:e5:eb:ee:95:
69:5e:97:91:c5:69:33:de:38:3c:36:cb:b4:bc:a7:
a9:37:5c:74:fa:6f:8d:b9:09:3d:1d:4c:e6:90:52:
57:74:6d:b3:e0:4c:b8:49:17:cd:9d:5f:eb:76:e9:
af:33:6f:35:50:9f:55:78:14:9f:05:ab:26:1f:8e:
d2:5a:fd:e2:01:00:91:3d:95:58:2a:ef:80:86:2f:
de:02:f3:db:2c:ea:88:37:2a:27:10:f1:76:e4:2b:
23:db:8f:d5:96:11:ce:55:0f:a5:86:b4:dc:9c:91:
8a:b0:c7:91:0e:68:4d:fb:f9:06:20:db:24:fc:23:
1f:94:8e:32:1b:94:82:8d:0b:a6:42:e6:7c:e5:8e:
fb:f1:42:19:be:1c:5e:40:d9:73:48:25:44:79:96:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:D6:A1:57:7C:D2:DC:85:43:4B:6B:6D:1D:1E:99:F4:78:50:35
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:de:9e:ff:fd:f4:12:c6:3e:3a:20:bc:6d:9b:83:1a:81:f5:
78:f7:81:87:23:1b:e2:0b:44:9f:a6:1b:1a:1e:b5:46:8e:f5:
e5:d5:42:1a:86:f3:f5:86:f7:45:60:0c:01:22:52:c0:c2:0c:
8c:dd:81:8e:f5:f9:b9:c7:65:ed:1e:93:ab:d2:01:e0:6b:f8:
82:68:08:c1:f3:5b:79:9f:68:92:40:43:14:c7:5c:97:42:28:
f3:98:c0:87:c2:c0:fc:a7:be:99:09:f9:1d:da:13:a3:89:a6:
5f:2e:94:6d:17:75:f5:42:49:a0:57:b2:99:f3:4e:83:11:3e:
cd:2b:93:15:cf:f1:e5:9c:9a:e4:ec:80:0e:f1:0e:ac:47:88:
62:c6:e7:60:2c:52:ed:ad:df:ef:4e:38:ab:33:b8:fd:04:cc:
a2:2d:f0:8b:6a:10:0c:e7:d7:de:26:18:76:49:b4:54:7c:eb:
fe:c9:b6:f0:65:c5:d8:5f:61:bd:54:cd:0a:5e:05:2e:14:b8:
c7:c3:3a:45:f0:21:72:ad:5d:b8:85:e0:4c:4b:bb:0d:28:ba:
b4:fc:71:e9:81:e1:79:ce:54:ef:94:55:d3:b5:ae:e7:a2:7b:
bc:ba:a0:1d:dd:7d:11:2c:da:ae:13:4e:40:c3:ff:05:1a:ca:
b8:a9:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:52 2025 by rpki-client