Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: 5IGrQ+iS/1xcsX9yaRejEoBoJmrGQsBidg1b1nawa68=
Subject key identifier: 31:01:60:53:42:68:6B:5F:02:27:67:42:59:2E:8A:1D:44:E7:7C:DB
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019A71B96E93BAF7BC0CB66085197B26C6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 08CA
Signing time: Tue 11 Nov 2025 07:02:49 +0000
Manifest this update: Tue 11 Nov 2025 07:02:49 +0000
Manifest next update: Wed 12 Nov 2025 07:02:49 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: a8W+q0jNsZrs/XofWWU/GY9sCU18O2BTjExRE3bl/nk=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:6e:93:ba:f7:bc:0c:b6:60:85:19:7b:26:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Nov 11 07:02:49 2025 GMT
Not After : Nov 12 07:02:49 2025 GMT
Subject: CN=3101605342686b5f02276742592e8a1d44e77cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:b8:ff:53:9f:61:65:51:06:aa:86:4d:66:
1c:b3:a5:57:5d:b3:e3:12:16:14:ae:40:e5:7b:aa:
7a:ab:be:7d:ef:7f:7f:b3:4b:8e:ff:d3:b8:2c:b3:
72:97:71:28:83:ea:c3:65:4b:14:ae:ff:33:2f:ad:
9e:21:c5:6c:53:3e:2c:fc:d4:c5:37:e3:70:aa:0a:
bd:fc:fb:64:2b:18:41:27:f2:8f:f9:db:ee:0b:4e:
30:58:93:a6:3f:b2:25:e9:91:f8:b2:8c:28:50:99:
e5:e9:50:46:77:00:1d:e7:96:6b:66:20:70:fa:d3:
33:2a:36:4b:6e:64:cc:c2:a9:30:36:87:59:b0:e0:
d4:c9:17:5d:e7:ec:30:bd:33:1e:42:f1:9b:57:a8:
86:cd:ff:62:0b:fa:53:a2:bb:b1:23:c5:9f:4d:5b:
ae:3b:06:ee:d6:44:7b:a5:67:c4:cb:16:b1:c9:5c:
b5:41:49:ac:58:e6:16:ee:2f:7f:b0:54:1a:db:44:
63:e4:95:c2:ee:60:22:8a:8f:09:3b:06:cf:8e:ca:
f5:03:46:91:1c:b9:dd:78:80:cb:3f:bf:fa:22:0b:
d9:02:83:70:34:c3:ff:d5:75:fa:93:b5:22:13:d3:
aa:6d:0a:b8:f5:be:95:82:d0:44:39:e0:4a:6b:a4:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:60:53:42:68:6B:5F:02:27:67:42:59:2E:8A:1D:44:E7:7C:DB
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6f:4d:ed:38:e0:6f:43:40:b8:5c:b4:18:3f:25:3e:07:52:
32:43:c8:4f:53:68:20:d1:81:dd:4d:4a:75:a2:fa:26:59:ea:
2a:9e:a5:3d:7c:83:cc:9c:45:45:df:8f:04:4f:1c:21:79:10:
fd:22:27:78:44:30:6f:49:2e:72:13:30:ca:db:07:08:93:41:
e0:a3:a6:2c:3d:cc:31:e8:80:03:5c:5c:2e:7d:23:d7:64:8d:
00:c8:bc:e2:d7:0b:06:95:b3:45:f6:67:38:67:07:69:db:7d:
61:94:72:03:ee:36:bf:17:7b:a1:08:8c:f1:92:9a:c9:d2:56:
f8:7b:d6:38:8d:d7:61:21:61:3d:c0:f8:f9:31:da:16:07:02:
61:ac:98:34:b5:35:61:57:0c:ec:8c:05:69:8d:e7:0c:77:ec:
cb:68:21:0a:8e:b8:6e:60:70:e2:3b:97:ad:72:a1:13:ed:ca:
97:17:8d:49:e8:e1:01:a2:f4:8f:29:c0:b8:73:b4:7c:57:83:
6e:da:96:e8:b1:97:1c:07:75:c9:1f:b5:bc:30:f0:be:69:46:
26:ab:c4:45:c7:6b:8a:7d:af:28:7b:04:3c:99:05:b1:9e:fa:
c4:d1:59:68:04:a9:5c:66:e3:83:78:49:17:4d:42:44:f3:cb:
ed:ad:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client