Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: SojElsEQJEMXMHnXqgJT/FyDn5A0A/PsckHuVmYNCCs=
Subject key identifier: D8:87:FC:B8:E5:15:10:98:6B:DC:BE:73:D4:03:9B:D0:9E:2E:94:C3
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019A251CF25120742ED76075BE8529724B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0D0F
Signing time: Mon 27 Oct 2025 10:00:45 +0000
Manifest this update: Mon 27 Oct 2025 10:00:45 +0000
Manifest next update: Tue 28 Oct 2025 10:00:45 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: UcaK9lP6rHhL8N5OhsKx7PFklMh2LGSGW22CXdRS1zM=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:f2:51:20:74:2e:d7:60:75:be:85:29:72:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Oct 27 10:00:45 2025 GMT
Not After : Oct 28 10:00:45 2025 GMT
Subject: CN=d887fcb8e51510986bdcbe73d4039bd09e2e94c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:d7:3f:17:b0:9e:b9:7f:7d:0a:15:64:4b:
7a:1f:86:e3:51:2b:5e:da:c0:08:d3:0c:28:3b:eb:
87:30:cb:30:ec:15:10:b3:ce:91:a8:8f:dc:af:4e:
b3:d0:0d:3f:fe:db:b4:c2:bc:13:f7:86:01:b8:5c:
54:35:a9:ac:a4:00:a8:67:16:1e:01:b3:cc:8c:f7:
02:02:d1:1e:2d:c5:77:0c:19:d3:fe:b6:6f:a6:00:
a5:c5:2b:06:fe:d9:0b:18:82:2b:d0:be:f9:d5:4b:
fc:ea:dd:e2:85:94:28:79:cd:3d:f9:84:8f:00:84:
f7:cc:4b:ae:14:eb:38:db:c0:1c:93:2e:8a:1d:e3:
ea:ed:f2:08:5c:eb:80:5b:ad:90:1c:37:6f:c3:39:
1d:42:06:d4:7f:40:d8:1c:87:e0:df:25:06:0e:c9:
55:ad:89:d9:6f:ca:67:5a:7c:5d:cd:29:9f:72:91:
6b:fa:21:f5:9a:cc:8f:28:df:71:1b:25:ad:3d:52:
ae:b8:96:7c:26:0c:10:82:45:49:d9:bd:91:32:d2:
9d:47:8a:8b:fd:ca:ab:82:e6:f3:7e:2e:ba:c1:e3:
58:5d:3a:24:c8:97:6c:57:a8:48:09:0e:ac:21:32:
3c:dd:56:86:31:35:f4:18:8d:ca:d4:27:09:54:d0:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:FC:B8:E5:15:10:98:6B:DC:BE:73:D4:03:9B:D0:9E:2E:94:C3
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:b4:ac:a0:51:8e:d2:74:09:c0:66:69:04:18:59:c0:15:
ca:27:e2:66:f7:88:36:8c:0b:ce:1c:22:ae:54:15:f3:74:07:
1d:ab:75:70:0c:86:2c:13:4b:66:b3:3a:7f:71:9c:2d:00:d9:
c5:09:29:35:4d:ce:10:d3:a4:db:db:4a:83:b5:29:b3:66:a6:
31:1b:a4:e7:d0:e1:fa:1e:0e:c4:36:33:de:12:26:e8:17:d0:
3e:21:63:0b:c0:e5:03:1e:33:3f:ec:ea:b3:a0:fe:c8:a3:ca:
bf:c6:cb:f9:4a:1e:98:d8:b6:16:9d:e7:1a:38:c2:35:fe:6a:
18:44:58:33:df:69:fa:d2:7a:22:a3:c4:5f:a1:43:79:66:b7:
7e:60:28:63:4e:b2:59:33:fd:06:a4:ef:c0:21:23:4a:1c:58:
8c:07:aa:8c:56:fb:ba:e0:eb:9a:df:0a:22:12:d1:3e:84:ce:
09:52:d5:96:59:a0:23:94:7f:db:5b:f2:d8:c0:5b:97:e1:cb:
71:97:d4:8e:63:25:da:64:19:e5:65:42:6c:c1:96:d7:79:39:
e7:62:fe:23:2a:0e:9a:be:c7:b5:ec:73:82:1b:28:1f:3c:78:
6f:1d:e5:ea:1f:be:ec:7d:d3:27:78:12:f7:dd:93:f2:13:4d:
98:65:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:44:14 2025 by rpki-client