Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: gBi+64MfMBcBKvTsj2QMH/+wXGtXL3w6vNIQV7XQdQM=
Subject key identifier: EF:60:BF:79:69:FB:6C:0D:24:50:95:67:B0:BE:E6:1E:49:F1:D6:5B
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019A72CA2D7F619482E5E0D95168A7B67933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 1544
Signing time: Tue 11 Nov 2025 12:00:43 +0000
Manifest this update: Tue 11 Nov 2025 12:00:43 +0000
Manifest next update: Wed 12 Nov 2025 12:00:43 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: dKzj61Tys8oAKcN77+KSz3/s6bBE4jXaIuePBuxoToM=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2d:7f:61:94:82:e5:e0:d9:51:68:a7:b6:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Nov 11 12:00:43 2025 GMT
Not After : Nov 12 12:00:43 2025 GMT
Subject: CN=ef60bf7969fb6c0d24509567b0bee61e49f1d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:f2:6c:c4:dc:dd:d8:7f:0f:17:5e:fc:3d:
12:d9:18:52:36:2c:aa:b7:a7:d3:9b:b4:49:a1:2e:
06:1a:e5:39:51:ec:e4:36:4b:b3:50:35:43:74:5a:
eb:56:7f:9f:9e:de:68:2b:7b:e0:a6:35:11:23:55:
ba:ed:5e:8f:8e:39:af:59:df:84:61:f2:58:c7:fa:
d5:29:4d:24:49:b8:59:06:d6:62:81:f1:10:ac:03:
d6:65:ad:85:87:00:a4:e0:e9:53:7e:b4:0c:42:fe:
06:b8:77:eb:cb:85:ec:a0:8b:93:38:b3:15:4c:40:
0d:2c:79:4e:da:e7:14:55:94:8e:46:1e:39:46:93:
58:2e:fd:74:c1:c4:b6:ae:97:a7:77:a7:85:cf:92:
fd:99:b0:0e:de:7e:89:ed:d6:00:cb:b6:2e:16:5c:
10:d3:31:58:b8:37:a9:1c:97:c8:9e:10:af:51:e3:
01:75:9b:0f:0b:5d:df:26:d0:51:58:91:d5:85:fc:
93:e4:14:bd:fe:71:43:df:fa:ef:0a:84:1a:4c:32:
7c:94:db:21:37:b7:32:b1:12:cd:52:63:60:cd:e1:
f1:f5:80:05:9b:29:e6:6c:d9:52:16:0f:16:78:ff:
10:42:ce:d0:39:2a:9e:b7:b8:64:03:bd:d9:2e:59:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:BF:79:69:FB:6C:0D:24:50:95:67:B0:BE:E6:1E:49:F1:D6:5B
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d0:fe:bb:29:08:d5:a4:3e:80:30:5d:87:a5:b9:33:41:5c:
bd:eb:b3:9c:59:82:0d:99:9e:a6:34:9e:9e:6d:59:47:7d:00:
0a:26:3a:6d:28:c4:ee:f6:19:13:30:94:a2:c7:76:72:7f:f8:
58:f6:07:26:75:b2:86:2e:89:cc:db:60:a9:98:fb:36:b5:b2:
fa:f9:61:86:10:59:b6:4b:39:f8:21:eb:20:d1:c4:1c:a4:0c:
fb:df:7b:bb:41:1f:07:b5:e1:48:e7:03:67:94:ac:87:6f:83:
68:05:2c:e6:58:c7:af:68:87:4d:88:79:71:76:d4:c4:ac:1f:
1f:2a:65:a4:3d:97:c5:f4:43:db:22:7c:3f:67:ea:5c:20:3f:
72:ad:ee:56:d9:8a:bd:00:ab:52:21:01:8e:18:da:00:68:30:
fe:91:e0:0b:82:06:0a:18:4d:74:ee:c7:bd:7f:4f:52:50:d9:
42:fa:9d:e1:9b:56:bd:46:58:a6:84:05:dc:4d:20:db:cd:8b:
d7:ee:79:e4:32:66:13:ec:0b:6e:8b:c1:53:bd:4b:48:5e:b4:
58:6e:54:7f:65:e7:6d:28:76:b3:02:b9:6e:fe:21:45:fc:4b:
ae:32:d2:10:51:79:87:8b:7c:c6:eb:79:2b:4e:8b:71:95:58:
53:59:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:49 2025 by rpki-client