Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: YPq8sbrwuEV7yvokavAozMOlbKyoEpaZrsmf+Kwe5eM=
Subject key identifier: AA:B8:68:FC:D4:9A:28:57:C9:E4:F4:E3:A0:25:97:DF:CB:ED:53:72
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019A7112B44BFF9D07E8902D78D7ED7A02F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: tIbukUPQx/P12p5kE6jlIQ3N3A5LRrxpXFGSjOKVZZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b4:4b:ff:9d:07:e8:90:2d:78:d7:ed:7a:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=aab868fcd49a2857c9e4f4e3a02597dfcbed5372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:f5:83:99:34:7d:78:fb:24:c9:6f:e1:cd:
f5:55:0c:4d:21:df:05:4e:4f:ad:d1:d3:0e:db:90:
b8:fe:b7:17:09:91:7c:37:6c:ff:9a:16:a3:1d:0d:
a2:a3:50:0b:14:4d:df:0a:68:96:f8:9e:5f:d2:90:
94:e0:b4:a6:a9:ff:57:6a:04:77:f7:20:c3:74:62:
11:5a:62:55:c6:71:1d:eb:48:ae:3d:41:0f:2e:df:
b2:bb:99:30:44:b0:9a:7d:53:f1:9a:8e:62:52:94:
0a:84:5b:08:e0:60:11:a4:4f:58:7c:84:20:97:2f:
e2:14:2e:e0:c0:a2:9e:e4:51:59:93:d9:e6:27:e1:
44:52:e6:d4:5e:e2:62:c1:d9:95:d7:3d:29:de:d2:
00:4d:a4:b3:53:2f:8e:be:0a:9a:9e:5a:b1:35:8f:
2b:72:6a:8e:97:46:d3:56:cd:43:54:5b:7a:0a:c5:
a7:6c:4a:5c:2e:e3:ef:8d:23:78:a0:64:19:9e:75:
ca:0f:7a:b9:4d:19:59:33:bd:ce:ce:e5:c7:ba:fd:
ae:1d:71:1e:cd:35:04:15:55:a0:41:88:0b:66:62:
9c:dd:76:b9:54:c6:90:58:04:bc:fd:e8:35:6a:e7:
00:d4:72:0a:d6:ab:77:ed:fa:51:0c:21:7f:4b:9e:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:68:FC:D4:9A:28:57:C9:E4:F4:E3:A0:25:97:DF:CB:ED:53:72
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e5:6c:d0:f6:1d:a5:02:5e:8e:95:72:27:68:a1:62:ef:ec:
80:ae:4d:eb:c5:30:08:7e:9e:83:8d:2d:b3:3d:94:ce:bb:b1:
ee:c7:08:bb:0d:84:7b:a6:f3:7b:45:78:f9:34:bf:30:4a:c2:
61:cd:b1:f4:a0:03:44:ad:18:97:62:16:9b:b1:78:de:20:da:
11:61:37:0e:1b:62:c7:62:c9:0e:c9:8b:86:dc:dd:1e:f2:2c:
7a:3e:23:ee:6d:25:e3:f2:ac:04:84:12:16:8c:e2:5b:dd:2b:
28:a7:c0:fd:0b:4f:6a:e8:93:09:5d:e9:3c:c8:46:57:85:f1:
95:c8:e9:ee:5e:99:39:4d:c6:4b:e1:79:2c:72:a0:e0:40:27:
d3:d2:7a:11:75:28:1f:88:46:3e:76:9d:5d:e1:70:da:14:10:
fa:b9:c8:16:91:d8:27:d4:5c:89:7d:04:ef:f7:8b:6b:61:9e:
8b:0e:20:12:7f:ff:1c:3b:0c:4b:20:c5:da:0c:11:02:dc:cb:
ed:27:30:83:44:4f:90:05:9c:c2:0f:cd:00:1a:ee:05:09:77:
c8:84:be:d9:06:56:39:ac:e8:25:51:c4:5c:90:e2:fb:52:e4:
db:26:e6:6e:14:95:bf:b5:62:f5:04:dd:90:4b:ee:06:73:2e:
41:ec:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client