Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier: C7EjsDWDeQiGQU6ZHi5fUKfR7EBowu2aCrB926Ur6ew=
Subject key identifier: 25:97:A3:B2:55:F2:D4:95:72:05:EB:CD:E3:B5:42:C0:5D:41:89:5C
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 019A72CA77940D1033B2478719283DE48A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: +NJ3z98FAvixpZ10izuqmYUFe5qF2URhVD7Znbz1leU=)
2: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (hash: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:77:94:0d:10:33:b2:47:87:19:28:3d:e4:8a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=2597a3b255f2d4957205ebcde3b542c05d41895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:cb:b5:9e:67:d5:ee:4f:75:e5:5a:d3:3e:
6b:54:77:75:8c:c5:3d:1f:6e:31:d3:ad:a9:1f:c6:
99:ef:1f:bf:cf:c1:d3:a4:88:42:bf:09:3b:ee:46:
fd:a9:b6:c5:6f:b3:51:08:96:85:a7:65:1d:4f:f0:
79:9c:87:87:2f:d4:0c:69:7c:d8:2f:f8:bc:61:3c:
9b:64:9c:c5:e8:9e:5d:68:da:ba:47:95:4f:01:3b:
14:20:8c:3e:52:d4:79:fa:bb:2e:3b:fa:e2:e3:37:
ba:25:b0:11:d6:fc:5e:66:44:02:f8:70:d4:b0:4f:
df:36:f9:b3:67:2d:77:48:79:62:84:2e:96:d0:10:
7e:ef:c1:de:75:80:3b:d1:6c:ab:ac:86:60:7b:6b:
9f:7e:4a:64:7c:b6:50:8f:39:5c:fe:41:1a:34:ac:
72:c3:17:8b:a8:cd:13:d3:65:a8:e6:66:b4:7b:29:
ed:df:6a:cf:c0:46:25:18:81:ea:8d:4a:d6:28:b3:
cb:f3:18:94:67:2e:ff:a0:99:dd:c9:bf:bb:93:6a:
7d:1e:70:70:64:e4:69:d0:e2:b6:bf:4f:5c:d5:67:
6d:ce:d5:ff:21:08:74:f8:0c:9b:7c:d0:99:12:d0:
a4:00:e9:79:db:c8:fc:79:a6:f3:a3:f0:57:4e:b2:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:A3:B2:55:F2:D4:95:72:05:EB:CD:E3:B5:42:C0:5D:41:89:5C
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:ef:71:ba:14:8e:19:50:8c:54:2a:1e:23:1b:8c:2f:e6:
dd:ef:59:8e:c7:e8:19:e2:3d:bc:ed:bd:6d:ed:1e:39:39:4e:
a1:33:a3:09:17:7a:2c:2d:ad:00:ff:f1:72:f3:2d:ba:5b:e6:
3b:af:98:e6:f1:ef:a0:f4:cd:50:e1:00:3e:fc:22:3f:4b:4e:
06:9b:b8:db:66:67:36:18:04:5d:74:d2:85:c9:2c:90:66:88:
ad:cd:0f:aa:57:03:a9:7e:80:75:7f:15:1e:aa:ca:7a:9e:e0:
7a:10:7b:65:f4:74:54:91:cb:e9:2c:63:4b:44:e8:17:1d:74:
b2:99:12:c7:32:29:72:38:f2:87:8e:9e:2d:b2:1a:75:cc:32:
ec:38:2b:b3:51:b6:c9:cb:ce:a4:f4:d4:ca:31:78:c2:cb:1b:
8a:4a:3a:03:8a:bc:72:aa:05:9c:f9:86:33:84:49:45:07:eb:
3b:8d:43:01:98:60:8d:7c:6a:98:84:2e:d8:a1:a0:f4:da:bb:
4c:79:04:52:77:2d:2e:78:d6:9b:a5:b9:ee:1c:9e:2e:18:34:
ad:11:5d:c2:37:1c:ce:1f:bc:7c:f6:c6:cf:f8:26:43:ae:dd:
71:7b:fd:06:d5:28:df:c9:e5:ab:22:75:61:8b:3d:10:a1:90:
6a:e9:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:05 2025 by rpki-client