Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File: 4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier: KtZ4MkejqcZyCoIHjJwc+XxYmNftOnS7pl9Zk7DATho=
Subject key identifier: FE:F4:B8:17:06:A0:68:37:E9:42:3C:BD:78:A5:1D:CA:AB:EC:3B:87
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer: /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial: 019A7225B55FFE8E644890B3B6D60F1E4092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number: 0A2C
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: DPJkw4JUE5tKssI7/5fqvvPK9rLLIoy4C1jqnc5rk5E=)
2: 93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (hash: +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b5:5f:fe:8e:64:48:90:b3:b6:d6:0f:1e:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=fef4b81706a06837e9423cbd78a51dcaabec3b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:da:c1:41:2c:c7:64:84:00:0e:39:e5:47:
c8:a2:bc:c6:52:53:79:49:6e:46:86:58:72:eb:c9:
1b:08:b3:04:28:0a:3d:2b:d8:66:34:9a:eb:27:52:
36:04:c4:c0:33:10:38:6b:fb:c7:3c:d3:e2:b6:25:
76:fb:81:de:8b:9c:81:ca:e5:b4:e9:32:70:dd:8d:
d1:64:7a:1b:62:c4:fb:8a:77:92:3a:f8:9b:06:8c:
99:0e:83:b9:4b:f9:76:44:b3:35:a9:49:ae:3a:7f:
db:28:e8:84:5a:d9:27:ef:14:c0:d6:f2:d4:e1:6a:
91:7b:41:b3:dc:52:c5:6b:b5:b6:19:12:a4:08:d8:
d6:a7:cf:09:9b:f2:45:97:b0:50:32:d8:e1:d0:5a:
e6:1e:97:ed:97:f9:d9:15:5e:6f:ce:b2:8b:14:29:
aa:16:c4:a8:e7:93:0f:e0:2c:8e:f9:9e:ef:6a:1c:
c9:48:58:a1:f4:07:6b:47:a6:24:7f:d7:68:51:22:
7c:64:2d:72:b5:7a:e2:29:8f:2d:2d:3a:c7:8b:be:
32:aa:2f:b5:04:7f:b1:3f:c2:1b:6b:8c:16:e1:e1:
78:0e:dc:4d:93:c4:2d:de:11:87:b4:75:e5:66:70:
f4:af:3d:0e:2c:59:6a:9a:e8:b4:f4:02:7d:72:18:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:B8:17:06:A0:68:37:E9:42:3C:BD:78:A5:1D:CA:AB:EC:3B:87
X509v3 Authority Key Identifier:
keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:68:7e:32:ba:e2:ff:f2:01:99:9a:e0:b0:2f:e5:53:5a:e3:
58:fe:0e:84:c4:20:1a:eb:3f:9c:17:ac:f7:d7:5f:97:64:25:
5f:d0:10:d5:39:c4:7b:77:59:a2:81:0e:69:f7:ff:50:6b:d5:
7c:2c:ae:c7:1b:02:36:fe:0d:1f:d2:24:06:7d:84:8c:4d:5a:
71:58:c6:65:6d:2d:c9:2a:8a:c5:1b:31:4c:c0:66:d4:28:9d:
27:90:05:8a:bb:45:6f:4f:44:ee:59:b8:0c:eb:3e:04:90:eb:
6b:64:62:fc:16:88:fb:4a:27:85:34:3e:74:46:f2:da:f2:41:
fb:6b:d5:3a:c8:7c:96:e3:22:f9:f2:94:d2:b9:f9:71:5a:fd:
3d:0b:4d:e2:6a:fd:cb:78:a6:5e:dc:41:b4:45:96:92:65:17:
95:be:02:ae:1c:2f:4d:08:f2:3f:11:aa:e1:c5:a7:55:56:7c:
9f:11:e0:e2:ef:12:a6:37:5e:47:a1:d9:b7:ad:1c:0e:b3:f5:
24:22:ed:71:a6:ff:8b:86:da:1e:e9:4a:d2:80:ec:81:1c:33:
ff:af:7c:66:d4:e7:93:c8:b4:ec:08:c8:45:81:79:47:38:8a:
2a:c7:c7:7f:2b:14:fc:66:06:3b:6d:64:41:2c:1a:ce:14:d3:
60:18:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:48 2025 by rpki-client