Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: g0uFZMTp2msYsL0h0+YNEOw8VSYgTtMgqBpeKRR4/G8=
Subject key identifier: E7:31:42:D3:B5:B7:ED:89:96:01:DB:4B:E4:FC:3F:8D:ED:07:FA:3B
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019A73A67EAFF218E0978B1591B0EA5D52B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 134D
Signing time: Tue 11 Nov 2025 16:01:22 +0000
Manifest this update: Tue 11 Nov 2025 16:01:22 +0000
Manifest next update: Wed 12 Nov 2025 16:01:22 +0000
Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: hMTXbkY10ZpD3nB0y+gFS446bR6U+dho5d5h6c8A4Qk=)
2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:7e:af:f2:18:e0:97:8b:15:91:b0:ea:5d:52:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Nov 11 16:01:22 2025 GMT
Not After : Nov 12 16:01:22 2025 GMT
Subject: CN=e73142d3b5b7ed899601db4be4fc3f8ded07fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:66:83:39:fb:cc:c9:17:96:42:54:d8:8b:
7c:97:a7:b2:76:d3:e8:75:18:2f:97:ab:32:bb:d9:
3e:91:4b:b4:bb:52:3b:c8:e4:09:ad:dc:17:d7:98:
a8:95:c1:13:19:87:36:f5:7f:5e:1c:c3:8e:9b:d9:
7c:56:6e:27:de:42:d1:12:c8:93:3f:9f:cb:c3:60:
4e:24:7f:14:2a:eb:ee:0c:c7:78:19:a4:e1:7c:74:
1c:7f:87:62:46:a2:13:49:c6:22:18:ee:92:f8:19:
3a:fd:9e:f1:6c:ae:8e:6a:7e:db:ea:7c:9d:ec:1d:
5c:4b:c8:f6:91:78:7a:04:de:eb:b8:80:49:a0:98:
04:30:db:fd:f7:29:c2:ed:9d:48:df:89:3d:46:df:
01:21:da:c6:4f:50:2f:b4:6f:09:a0:28:8c:21:58:
bc:26:a0:3d:0c:eb:b3:0a:41:ea:34:6c:b8:41:7e:
12:09:03:6c:ed:09:50:c5:48:98:5a:52:d7:b9:a2:
ff:7f:76:79:33:88:6f:6a:f6:16:ec:ed:c9:92:34:
74:03:8e:4a:44:35:5e:4b:30:da:fd:a9:4f:24:6f:
b4:57:28:b2:66:e6:2f:ee:83:19:fb:e5:e2:77:4e:
fd:6f:ee:2e:49:eb:59:df:2d:d7:fa:cd:23:10:f2:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:42:D3:B5:B7:ED:89:96:01:DB:4B:E4:FC:3F:8D:ED:07:FA:3B
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:68:06:99:58:ad:32:e2:74:e2:99:82:c8:db:3a:87:a9:
d4:2e:43:5b:97:67:eb:0b:88:17:52:6c:56:18:ec:57:e4:c4:
22:6a:e2:f1:27:97:3f:a1:6c:2e:53:ba:95:85:c9:f5:ec:1c:
be:82:82:f3:a9:98:69:8d:70:d2:85:43:97:e7:82:8e:f1:66:
23:d6:4a:14:02:ec:ad:7a:87:b0:c8:08:e5:92:e9:50:51:ab:
43:47:ea:49:38:10:29:ce:d3:ca:4e:87:8e:bd:ff:52:bc:59:
72:73:20:1e:9e:20:29:53:3e:2d:96:b9:cd:65:66:e1:73:df:
9a:a7:5d:92:b8:24:62:1d:e9:e5:03:f9:e0:e2:b4:b9:89:54:
19:92:96:6a:0b:30:a9:b7:8d:22:0a:58:a6:75:a7:d5:54:64:
d3:f4:20:4f:01:b5:99:62:bd:18:e9:9f:19:22:78:97:3a:f9:
38:b6:2e:46:32:90:c5:79:e0:f7:1a:8a:82:88:40:40:dc:5b:
68:17:11:81:cd:11:6d:a1:49:9e:a3:86:5b:ba:e3:37:f8:29:
10:46:38:82:91:b3:67:8d:ef:88:bc:69:e7:e1:de:c5:00:22:
6d:91:de:63:4a:7a:04:67:86:3c:41:e0:9a:b9:74:3d:37:6a:
a3:4c:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:19 2025 by rpki-client