Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: 6mBvYf6M9WUxJjNC5JWIHoQdnWoc59jqrFqeI7MIJS8=
Subject key identifier: 6C:2D:8A:82:92:1E:DC:7D:72:1B:83:64:63:AA:C5:8C:39:D8:72:57
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019A71B8FDEAD8081DF5A5176886C081AFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: nM0c7DKhS5xdimD1/a0Hpzvvy86byzgsBgVJRZ9Z2mk=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:ea:d8:08:1d:f5:a5:17:68:86:c0:81:af:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=6c2d8a82921edc7d721b836463aac58c39d87257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:86:db:e6:d1:44:54:1e:e8:9f:c0:b5:3b:
09:7b:44:3f:d8:23:fa:cf:ee:07:dc:a3:cd:83:98:
2e:f1:db:c7:bd:c6:e0:ff:c8:db:43:af:53:b1:31:
fe:6a:92:a9:4b:8f:98:ee:0f:50:94:d5:53:10:f4:
a2:69:28:f0:ad:ce:24:78:3a:49:26:d6:5c:db:96:
0a:7a:0e:dd:24:b3:83:a5:90:07:d2:52:ac:2e:aa:
65:cd:d0:ae:4d:fa:c3:dc:f1:de:e2:b8:64:0a:56:
f9:d4:b5:49:19:c8:ad:69:0e:ad:74:d3:f1:77:e3:
91:a2:ed:b8:37:e5:05:dd:cb:0a:82:77:2c:c2:1d:
22:ba:84:07:82:cb:e7:23:5c:88:81:97:f2:26:89:
cc:b1:22:3d:f6:bc:81:3e:d4:e2:79:8b:0b:b6:d8:
54:2a:8f:63:32:24:aa:dc:fe:5f:25:7d:82:89:2d:
1e:a7:4e:bc:6f:4b:d1:a1:0e:65:86:3c:52:6c:e5:
9f:e4:41:ef:2a:3d:35:56:5b:5b:f4:eb:08:c1:1a:
f6:e9:63:e7:a7:76:54:aa:50:45:94:a4:cf:ff:12:
67:3b:9e:98:6a:14:51:a7:53:20:69:a1:fa:86:52:
73:ba:3b:4f:ad:c0:1a:a8:55:78:24:df:16:9a:bb:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:8A:82:92:1E:DC:7D:72:1B:83:64:63:AA:C5:8C:39:D8:72:57
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d2:b2:b5:7b:5f:5c:c7:1b:99:cb:65:93:0b:55:94:1b:d1:
97:89:24:e8:97:ac:60:97:3b:13:21:99:f7:e7:d4:03:73:69:
f4:e3:0c:8c:de:ff:47:c4:6c:4f:f7:7d:d9:46:0b:20:5e:8f:
e5:59:ad:d0:20:96:16:9f:2f:81:6d:4e:7f:4e:c1:58:e9:ba:
8d:62:f3:87:bb:c6:36:df:18:5e:34:aa:3b:ec:19:f1:38:e6:
6a:48:9f:0c:33:fa:f6:1e:d6:1f:85:29:fb:04:6a:e2:1d:22:
5b:df:4b:85:46:fa:5e:8c:c0:4f:e3:80:28:04:e8:78:49:12:
77:bf:db:84:46:3f:c8:c3:53:0d:ab:9e:e8:36:2e:cc:59:23:
46:08:53:37:50:86:63:d5:75:3f:fd:44:34:a3:41:05:b1:a8:
f8:36:d8:f5:31:aa:ed:16:ef:cd:c6:7e:32:b3:f4:0f:df:a4:
cb:c9:98:f0:c5:87:04:a7:e5:73:fb:3d:26:0f:ac:c7:71:a8:
c3:6a:57:f7:28:dd:14:6b:4d:46:a2:e6:57:99:b1:47:cd:74:
cd:f1:8c:4a:cb:91:b7:50:53:91:ed:47:68:6c:c3:8e:cc:3f:
00:1c:93:36:7a:de:29:41:8e:6a:5c:0e:1e:e4:22:ee:f1:d3:
95:cd:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:34 2025 by rpki-client