Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
File: R34OvwADKaAhrl6PHYHEBfuNCzw.mft (raw, json)
Hash identifier: 0wfyzYRmBsiTYUlWfNmv4mHgaqX7aP6gKrcczas2Dls=
Subject key identifier: 03:DA:0F:35:43:4F:47:AC:7E:89:63:28:7F:FE:9E:D9:F0:AF:80:1C
Authority key identifier: 47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
Certificate issuer: /CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Certificate serial: 019A706E5293B30B6913D964B1F828C78C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
Manifest number: 4B
Signing time: Tue 11 Nov 2025 01:01:09 +0000
Manifest this update: Tue 11 Nov 2025 01:01:09 +0000
Manifest next update: Wed 12 Nov 2025 01:01:09 +0000
Files and hashes: 1: R34OvwADKaAhrl6PHYHEBfuNCzw.crl (hash: Obf9G7S5T/D0hGudB9gD6VEYMuhfuooSzYEvvAl1WYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:52:93:b3:0b:69:13:d9:64:b1:f8:28:c7:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Validity
Not Before: Nov 11 01:01:09 2025 GMT
Not After : Nov 12 01:01:09 2025 GMT
Subject: CN=03da0f35434f47ac7e8963287ffe9ed9f0af801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:51:e4:b1:79:6e:85:28:fd:9e:a3:20:93:
4f:95:34:63:e1:34:23:c7:bd:51:2b:32:ab:0f:74:
8e:93:da:52:47:84:ab:75:0e:fe:16:75:5d:a6:0a:
39:17:4f:a0:af:02:78:50:1c:06:23:1a:50:71:36:
b0:73:6a:d3:c9:94:e7:ea:77:af:fc:ae:19:ef:b2:
f7:ee:e9:34:e9:9c:b1:ed:22:17:ea:6e:06:8e:da:
9d:ee:39:7c:72:e7:88:f7:8f:d8:db:61:b5:91:6f:
d6:ec:90:c7:0c:ef:ef:ee:06:cc:8a:a0:e1:03:b1:
52:27:1e:0b:fb:63:05:47:81:e4:b7:6c:80:09:c6:
18:c9:85:61:69:58:be:c9:75:c9:68:da:4f:81:17:
06:1e:c4:9b:91:98:d5:00:d8:24:ae:b0:7f:3e:e9:
db:84:40:5d:b6:42:09:fd:6a:9a:c6:d7:a9:00:db:
92:52:07:83:96:38:72:be:8d:7b:10:6f:c6:c1:dc:
b3:33:7b:1c:8e:63:45:c1:8f:74:e5:94:87:de:cf:
ac:77:cb:6c:05:7a:ea:04:82:dc:72:36:30:90:d2:
c6:b2:93:b2:1b:d3:7f:e6:43:d2:a9:47:f4:25:7d:
3d:a9:80:d0:7b:96:e2:03:5d:e2:66:77:f5:60:68:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:0F:35:43:4F:47:AC:7E:89:63:28:7F:FE:9E:D9:F0:AF:80:1C
X509v3 Authority Key Identifier:
keyid:47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:99:d2:43:2c:c1:1c:13:ec:ec:22:8a:51:2f:a7:b7:56:
ef:b3:a6:31:cf:f8:cf:75:49:53:8c:5b:b9:b4:6e:78:20:d6:
8c:87:a7:f1:e6:9d:96:e1:a1:7e:01:5d:16:de:2a:93:ed:4e:
dd:af:9f:a7:a8:3e:36:4c:38:12:7e:b8:1d:5b:fb:ed:51:14:
20:1b:08:00:51:6e:aa:ef:1b:4e:29:2b:6d:84:e6:c0:38:ca:
76:d4:aa:3a:63:1d:ca:f8:4e:15:18:8a:a9:28:76:49:f7:8a:
56:cd:6d:0c:62:01:f4:b2:bb:e2:69:3e:00:9d:60:94:bc:f6:
f4:2a:c6:89:10:92:b2:d5:39:97:79:f9:a0:a0:06:ce:e4:49:
87:d1:c8:dd:23:b3:59:5a:d8:f6:16:c9:5d:f3:19:7c:b1:9a:
e0:84:58:ba:74:f5:6d:a8:ff:69:a3:8f:1b:16:02:b4:bb:bc:
43:d9:e3:f6:dc:ae:f6:94:5c:27:f8:a5:e6:a8:6a:c2:c8:fa:
0b:2e:5c:3d:c4:a7:b2:a4:e5:9e:35:df:3c:a8:e7:ec:f6:86:
ab:b4:9e:55:96:42:30:a6:4c:10:e5:98:6b:47:ca:f5:4a:31:
86:5f:6f:6b:37:dc:02:cc:61:17:c6:ca:e9:a9:c5:a5:11:4d:
fc:ae:43:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:43 2025 by rpki-client