Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: Y8h5EgMyQ0k5JqFnzMKRVuSw9DB05kBKAKcxZQgDo1U=
Subject key identifier: 87:75:F3:CD:9F:49:93:6D:42:68:97:98:C1:CB:9F:ED:53:18:2C:EF
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019A71B7F64D1FA7EFC7339CF6FA6A5DEC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0521
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: FvkZjuxYZek85lRHMuKIeK0nXaP4/Ewd4qwhs4KkPK8=)
3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f6:4d:1f:a7:ef:c7:33:9c:f6:fa:6a:5d:ec:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=8775f3cd9f49936d42689798c1cb9fed53182cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:7d:ae:55:d0:e0:53:f7:cd:0b:3f:68:a2:
e0:43:f8:e2:c9:df:d1:67:1f:42:42:e1:97:4e:96:
a2:d3:7e:bf:65:ad:86:78:d1:e6:a9:75:84:34:21:
9e:a6:7e:0a:0d:11:82:7b:51:1c:8b:bf:70:29:fe:
9a:94:48:1d:bd:6f:d3:88:47:a6:9f:23:9c:52:5a:
6a:a5:44:9a:8b:74:47:8e:5e:94:d4:7f:4b:09:4d:
b9:d7:6a:70:82:3e:6f:69:72:34:3b:ca:3a:e3:2a:
b8:4b:3e:fe:46:06:61:b1:0c:69:bc:1d:01:6d:80:
dd:6a:c4:2b:ec:87:15:20:8e:4b:0b:4c:9b:f7:fa:
b3:f1:db:0c:54:90:58:6c:67:5f:4b:6f:3c:06:a7:
2d:01:d6:17:c6:52:17:ee:ac:da:44:ba:bd:6a:9b:
96:b1:2b:34:c8:e1:8f:37:2c:39:4b:b0:6d:e6:53:
7e:f9:91:db:61:47:a3:ad:b0:26:49:a1:0d:a7:07:
1a:1c:08:f5:f1:34:66:87:f5:05:71:8a:b1:d8:5b:
bb:93:e1:fb:6f:9a:da:78:d1:61:05:dc:d1:4c:1d:
7e:fd:25:e0:86:1c:ab:6f:a6:70:15:f1:a2:3e:86:
bb:c5:7d:8f:27:6a:aa:fe:d4:cb:2a:f6:3b:a3:98:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:F3:CD:9F:49:93:6D:42:68:97:98:C1:CB:9F:ED:53:18:2C:EF
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:fa:cf:88:0d:9f:6d:e1:df:fa:c5:f2:51:c9:92:ba:0f:
05:0f:58:34:f8:ae:cd:2a:4c:fb:11:47:bd:46:5e:1d:30:1d:
70:7f:bc:aa:49:e4:ce:b6:90:bf:a4:0b:a4:e2:e4:f4:6a:d6:
01:d2:e3:80:46:f5:af:bd:47:dd:4b:e2:03:3f:1d:a2:cc:20:
cd:88:4b:9a:97:5e:c6:b8:92:a4:2f:83:8c:fa:50:4c:76:88:
80:a6:4c:51:8c:4f:b3:96:75:0d:e2:1b:38:6c:b2:ec:ba:a9:
9a:32:70:2d:0b:02:1a:91:20:01:08:61:25:95:87:6a:98:34:
90:40:14:59:fc:11:75:32:89:d2:e0:d8:74:e1:42:54:7a:94:
65:ad:dd:09:d6:e8:38:27:6f:c4:ca:bd:95:fb:11:92:ce:7e:
8e:00:08:f0:62:a7:93:93:af:65:d9:fd:9d:91:30:64:ff:c3:
30:23:b1:09:a0:f0:41:a2:f3:e0:79:08:b3:b2:84:90:2e:25:
ef:7a:17:23:10:cb:54:02:c9:1a:14:36:fb:68:4d:7f:28:78:
9c:bf:d3:9b:96:7b:0e:3e:c6:bd:fe:2f:9a:e8:24:ee:54:5a:
d9:2a:6b:68:e7:73:05:a6:9e:e4:b5:c0:ed:fa:c5:db:29:52:
da:83:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:02 2025 by rpki-client