Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: gCkqoNuvKBjp4CdaPTDPSZnfqJhvKx/JvMuBui06NEI=
Subject key identifier: 47:D5:79:45:10:3E:8B:D9:9B:42:B9:11:42:B9:E3:87:88:D1:47:4C
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019A71B7971DE8B666E73F35CB1E2E7FD013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 0632
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: 78cHhfyL+cztEdlhXtZlRdeolh5tnZq3L8D0Jn0LF+w=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:97:1d:e8:b6:66:e7:3f:35:cb:1e:2e:7f:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=47d57945103e8bd99b42b91142b9e38788d1474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:42:de:1f:2e:57:7b:fa:cf:7a:b2:ad:8c:
33:51:85:23:9d:1a:37:30:03:e6:d7:4f:82:41:d0:
06:a6:59:7e:47:63:c0:d3:bf:28:88:b2:84:be:6e:
0e:62:dc:02:7a:ee:54:b1:f3:46:f7:22:3e:9d:e7:
f1:8a:ff:b6:97:64:22:8a:05:f0:a0:c1:e3:e8:be:
d5:97:76:b5:1c:de:8d:aa:1d:84:e3:a6:49:bb:19:
d8:43:79:49:da:e2:ef:b4:be:e3:15:2f:0c:db:af:
3b:f1:ea:2d:1a:44:6c:f6:5c:65:d1:f1:0a:d8:29:
96:db:20:72:8c:4f:c4:45:6c:4d:62:4d:34:2d:0b:
48:98:7b:74:bc:e2:72:fb:74:56:ae:e1:4d:f0:2e:
cb:3a:67:53:c9:2b:3c:71:51:e6:69:30:79:3b:75:
dc:4d:f9:ed:1d:21:2f:a7:28:ec:82:fb:41:f0:14:
8c:d1:16:96:4f:a8:7a:bd:1f:6b:95:92:29:52:48:
07:53:02:86:3f:c5:fb:29:1a:e6:e8:f4:13:75:52:
c9:db:d5:6c:3d:60:7e:b6:f4:64:0a:3e:3c:d1:28:
7a:ae:66:82:16:a9:4f:24:b2:b0:31:c6:62:31:8d:
aa:a9:0e:97:35:13:62:cf:88:dd:42:1b:3c:8d:4e:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:79:45:10:3E:8B:D9:9B:42:B9:11:42:B9:E3:87:88:D1:47:4C
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:34:31:66:47:55:7c:47:5e:11:cd:f7:87:8c:52:a2:63:
df:4e:9c:ea:60:6d:0c:37:87:a9:50:96:bc:4f:08:af:50:bb:
d8:ce:c6:89:ad:e0:ca:86:f1:e2:69:c2:cf:5f:11:da:ce:94:
1d:19:46:55:90:7d:14:8a:a4:05:7c:77:c1:0d:04:69:d0:82:
8d:58:cd:1c:9d:13:fd:57:2c:3c:9a:ea:0f:f8:3e:97:a0:73:
a4:da:80:0e:93:c3:16:c0:84:bb:98:ff:79:68:09:8a:5b:04:
24:8b:0b:18:6f:be:eb:7f:7b:94:9f:cb:c3:08:ca:c9:95:f9:
5e:b4:83:de:41:98:00:e5:7e:dc:c2:cb:9b:28:6c:39:b2:56:
0e:64:4c:dc:10:1e:d8:72:2a:1f:c3:37:60:f5:d9:08:f3:34:
d8:41:32:0d:22:49:ce:60:cd:14:d4:17:58:5c:16:8e:43:0b:
c6:3f:66:aa:e0:43:cd:51:ae:a7:ed:8a:f1:9a:84:96:78:52:
d7:23:45:e6:0f:17:d6:6e:17:11:17:1e:29:eb:51:1e:9d:c7:
91:1f:5f:9f:b6:af:c6:bd:a2:13:f6:c7:a6:e8:67:76:f0:6c:
57:8c:c8:82:3f:c8:5e:7b:d4:88:ae:62:bf:f7:47:30:23:43:
ea:3a:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client