Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: FKg2E3mA1Ep6P3JNSOxYZt0IFASKmtDCMQkcb0/nRX8=
Subject key identifier: 6E:68:C3:2B:43:61:2B:B0:CE:94:FD:39:8C:5F:D6:FC:91:8A:D5:15
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019A71B7983B54668494A2EADFFA657FA53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: ObJb2FKOnUFyBWKRS3gEsYIUB276UnJj6MALUpA4eqo=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:98:3b:54:66:84:94:a2:ea:df:fa:65:7f:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=6e68c32b43612bb0ce94fd398c5fd6fc918ad515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:7c:60:b9:4f:2c:44:c9:ff:f4:10:12:0c:
58:87:d2:a9:14:de:fe:05:98:5f:9d:ce:2e:13:c8:
27:0f:b7:75:56:50:d4:46:37:3e:d8:02:27:5f:80:
dd:20:34:9a:ab:2f:17:50:d7:46:da:0b:e9:5e:73:
50:84:62:86:68:00:3c:b9:c0:97:20:7e:ef:85:f7:
5e:d3:9a:a7:d5:d4:8d:45:6a:6f:62:47:16:ea:f7:
2a:45:5d:af:6b:8e:e5:dc:36:bb:12:d5:40:40:b2:
57:4a:db:cc:ef:d1:90:56:0f:ee:00:f0:2e:d7:e5:
c3:c5:88:a0:14:0a:ab:32:95:ce:29:74:1f:f2:c2:
50:27:06:6a:fc:b7:ce:24:32:10:f4:d8:52:f1:51:
88:ca:93:20:22:d0:18:e7:bd:4d:2e:e1:0f:82:49:
32:d0:5a:18:27:33:56:55:57:23:b6:08:e7:5b:ab:
24:05:6e:b1:c2:4b:36:8c:ee:1b:99:da:f0:e8:e0:
86:c2:3e:ea:ff:e8:72:91:23:49:33:6c:20:5d:fb:
cc:d7:22:24:67:ad:33:e7:1a:45:d2:c9:fe:88:81:
27:64:c9:39:bb:12:67:05:32:45:e7:49:00:2f:ee:
0a:b1:94:57:dc:9b:9c:24:5b:f5:7c:f4:1d:61:3d:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:C3:2B:43:61:2B:B0:CE:94:FD:39:8C:5F:D6:FC:91:8A:D5:15
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:14:59:54:44:17:26:b3:60:07:51:e4:ae:a9:c8:4b:df:
80:ce:6d:bc:f4:9e:d3:88:2a:a1:ba:63:c6:80:8e:4f:5c:a8:
64:4f:5e:08:cb:26:cb:90:f4:82:a1:30:10:c0:fe:52:54:87:
de:76:20:30:bd:bd:41:c2:a3:cb:a0:68:07:f4:fa:f6:9a:17:
8f:87:d2:60:54:a7:ef:78:69:86:fc:28:b5:e9:4f:40:0a:4d:
df:15:2c:02:77:06:a2:a5:b0:7e:70:f9:0b:6e:23:59:2f:e9:
b8:2c:cc:47:aa:76:30:fc:2d:c1:94:77:81:1b:9e:50:99:a4:
42:48:d9:37:90:29:f1:bd:1b:e4:f0:c2:a9:94:52:55:1d:37:
ea:fd:ca:60:de:c1:d5:ea:8b:44:76:19:14:a5:ec:dd:ad:ad:
83:b8:f0:bb:16:11:d0:b0:e4:e1:b4:87:32:66:9b:b6:a3:2f:
ec:32:8f:14:c2:d0:dd:ba:75:27:66:cb:45:3a:82:91:7b:60:
6d:6d:68:39:a0:91:3c:ac:60:df:0d:3b:bc:56:98:3a:6e:3d:
54:8c:c7:cd:bd:28:a2:23:ad:c4:ee:99:48:1e:19:fb:3d:68:
13:3d:7b:9e:10:8a:df:ac:9c:c9:3a:3c:61:5a:59:aa:be:5d:
71:e3:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client