Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: wsVNrN/Fdi5T2URkShNL/X8DbRcAWoi36winMWK39PE=
Subject key identifier: D6:0E:12:B0:52:A1:6C:AC:BE:3D:38:E9:A0:91:BD:DA:D1:16:C0:17
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 019A72CA6D823C80068D228154964904E7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: gaZGkmBvKMCF90Nk3aZQ8pvjzb08Fp+sGQQ3l4a5tn8=)
2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6d:82:3c:80:06:8d:22:81:54:96:49:04:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=d60e12b052a16cacbe3d38e9a091bddad116c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:f5:c0:22:87:3a:a1:ba:ce:64:2a:e1:4c:
f5:6c:16:8b:ff:5a:0e:a4:c6:33:6e:a7:83:06:ca:
64:ea:20:98:7e:3e:1f:5e:dd:d6:e8:c4:54:6d:08:
aa:d7:ba:eb:fb:82:d7:7a:7f:7e:60:76:39:13:38:
f6:6a:9b:ae:cd:b0:e7:56:61:e0:2a:b3:87:1d:e0:
23:18:31:a3:3e:76:66:f2:fe:b7:14:8f:ce:f8:82:
b1:0b:c6:29:1b:8a:63:e5:be:38:07:40:80:0a:5c:
a9:0a:d5:e1:cf:c9:c1:2a:5a:85:bf:13:c2:e4:69:
25:9f:76:df:58:c8:c6:a2:52:1e:5a:6c:41:7d:88:
a5:0c:6a:7f:d1:6d:44:0a:c2:b5:d0:ef:44:f6:94:
0d:ca:6e:7d:4c:35:95:b9:86:e6:15:16:2e:f8:5a:
3e:6a:d6:37:f4:21:5b:e9:85:4c:7f:bc:9f:c5:fa:
de:d1:29:62:e7:81:84:7b:6a:0e:49:4b:8c:d1:5e:
1f:53:ee:97:d4:9d:28:eb:9a:f8:99:93:50:eb:77:
f8:82:57:c3:67:cb:5e:e7:58:8d:73:22:37:c9:3b:
a2:9e:72:d6:1e:bb:b4:e8:57:08:ff:19:3c:a3:9d:
44:36:bc:fe:97:0c:c8:df:38:f5:29:da:52:90:03:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:12:B0:52:A1:6C:AC:BE:3D:38:E9:A0:91:BD:DA:D1:16:C0:17
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:c8:6a:3f:49:90:e6:1a:e3:b3:8d:c1:a3:f7:51:e5:b2:
b6:d1:c4:db:d5:8c:7d:33:41:6f:67:b2:f1:6d:c2:93:5e:f1:
09:31:d2:e5:60:60:97:bb:a9:fc:53:e5:a6:e8:4e:fe:3c:c1:
55:8e:2d:fe:e0:ce:54:93:84:2a:5b:8d:88:1a:32:2b:05:3d:
c3:f0:35:40:b5:94:8c:3f:93:46:12:08:ce:66:37:cf:a5:34:
bd:f9:80:3b:5c:ee:b3:43:09:7d:59:0e:6a:98:bd:c4:29:be:
c0:f1:3c:9a:92:e5:55:77:4a:99:99:26:9b:5a:5a:8b:3e:5b:
f5:25:ef:61:bd:19:88:ef:7d:d7:dd:9a:3a:81:83:08:45:1b:
fb:5e:ac:4e:06:39:82:68:d0:7d:1b:18:91:08:88:50:52:8c:
5a:9a:5e:bc:e2:49:e3:c8:d5:87:3e:47:8c:f4:f1:71:ec:b6:
41:d5:11:e0:c6:9d:d0:74:29:68:98:c0:af:f4:01:33:c3:14:
3f:76:6c:b0:bf:07:fc:fc:df:b1:96:4a:92:96:72:17:5e:37:
50:3c:c6:91:97:81:58:a0:ad:e9:fb:18:9b:b7:dd:6d:a1:2c:
61:9f:46:75:58:af:e6:6a:21:b7:c6:e5:6d:52:eb:35:36:b9:
d7:91:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:55 2025 by rpki-client