Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: w84HRp6/y5vihlEbNDJGx/rr42v7PnT03Qk+qGDVmKk=
Subject key identifier: 90:B6:4A:DD:75:61:D9:3D:2D:8D:67:B5:31:1E:FD:EE:68:DD:55:D2
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019A725C61B6B7766CC66312915A1349A3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0AB2
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: KWePeTCOyD3xr/fZYAyXsfQKhH3xMmKYLBbkhuQac5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:61:b6:b7:76:6c:c6:63:12:91:5a:13:49:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=90b64add7561d93d2d8d67b5311efdee68dd55d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:6b:d7:4c:56:4c:ae:39:56:ef:e3:75:c6:
50:ca:74:66:cc:00:7a:00:73:df:66:9d:81:13:18:
14:ed:7b:53:a4:99:c7:c4:9f:7d:ee:76:f8:58:33:
3e:01:0f:c9:37:80:97:d6:d1:bb:fa:b1:57:46:c3:
17:c2:b4:bd:54:84:67:9b:da:d7:50:ef:c8:c0:5c:
ad:b4:e8:80:e6:fd:72:08:09:7d:66:02:7e:57:76:
db:2f:17:11:b5:e8:41:48:6d:74:5b:91:6c:c4:52:
99:a1:94:f6:13:36:ed:ab:ff:a3:7b:ba:9c:ec:a9:
58:f3:da:04:f6:72:a5:b7:3f:3c:bc:d4:0e:a2:76:
e5:99:a0:7e:09:11:da:7c:ee:f3:bf:ee:2c:8a:33:
54:b1:b8:0a:75:b0:41:e6:81:b1:0e:56:14:20:65:
ce:12:18:61:b5:fb:75:0a:bb:03:e7:a2:9e:fe:a3:
9a:44:af:4e:58:1c:e2:0c:ac:be:fa:a5:e6:ac:48:
49:9d:4b:16:95:6a:7a:ef:c5:cc:1c:f4:70:1a:3e:
65:83:d8:2d:44:d5:37:d7:f2:d6:1d:95:cf:d7:40:
59:df:70:06:be:64:8d:d1:1b:45:97:a8:1c:ef:30:
3d:f5:9f:89:72:6a:dd:34:0c:1a:fa:fe:89:f3:e6:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:4A:DD:75:61:D9:3D:2D:8D:67:B5:31:1E:FD:EE:68:DD:55:D2
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:e5:8f:3d:aa:0d:7f:f5:2c:09:0a:df:fc:39:7d:48:cc:
45:6f:8e:08:a7:32:38:e3:50:f5:21:46:2b:7e:6a:d4:d6:5c:
42:e2:01:01:44:50:44:9a:e5:8a:f6:68:d9:6e:3f:26:6d:a9:
38:0f:f8:c4:da:2d:ae:55:6a:f4:35:5a:a1:3d:42:8a:18:6a:
57:c9:cf:05:d3:33:fc:69:fa:e6:7d:13:14:85:59:a6:a1:4d:
d0:fe:4a:d1:7b:ce:f7:7d:7c:67:90:ae:f6:37:ba:38:10:e5:
ce:79:5b:28:2c:f7:94:4b:6b:3e:bb:d2:02:81:c1:89:d6:98:
58:72:5e:42:19:24:32:9c:4d:16:dd:1c:ce:56:21:37:4c:f9:
59:dd:11:a6:ec:a0:5e:81:9c:b4:8a:17:7a:80:4a:52:38:2f:
13:fd:38:48:4f:ac:36:83:e5:41:c9:9f:27:cf:70:59:f9:07:
99:66:e9:2f:74:91:49:34:75:da:1c:62:80:97:61:6e:2a:96:
b6:99:94:cd:c1:fe:2e:55:55:f3:07:31:5c:c9:45:5f:1b:19:
04:4d:db:8b:c3:75:4c:f2:5f:30:e1:6d:87:93:5f:bd:af:2d:
39:f0:1b:84:54:a9:0a:f2:a2:ba:61:0e:86:16:8f:0e:a8:96:
44:da:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:21 2025 by rpki-client