Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: ANGYX48U8okBRbkdluk+3WWKzIKaqoUrEOdyvKXKVA8=
Subject key identifier: CF:33:BF:5E:E3:65:92:16:CA:FC:95:66:86:F7:F8:EA:F2:CB:B3:18
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019A714A14BEA3DA552E1B1C754DA73BE02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1357
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: 1yffeEAlkHpCSPofwopCAZ2rRWc.roa (hash: oLYYyh0+bRIg5caImko3WBrhuFPOBEoNn3gpu+iT4Rs=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: QJHyBYPK3ecob90ekk+CK0XXm/3swFb9bGmbwkD5ZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:14:be:a3:da:55:2e:1b:1c:75:4d:a7:3b:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=cf33bf5ee3659216cafc956686f7f8eaf2cbb318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:e3:31:65:b7:4b:21:ae:33:e8:0c:5f:80:
be:42:85:31:78:c9:4c:e8:8a:9a:f7:47:fd:de:aa:
9d:36:d6:95:5c:86:92:2a:0a:51:d0:d2:49:d3:b2:
13:7f:cc:0e:5b:9a:c0:25:11:32:ce:a3:95:01:29:
48:af:b6:23:4a:7c:65:c5:da:ff:20:20:28:0c:12:
b2:cd:b0:e3:91:07:95:2b:15:33:e6:ae:5c:9e:94:
81:86:18:33:30:58:ff:1f:d4:70:f5:ca:a6:5d:bf:
14:20:45:65:1a:b6:27:11:69:b0:b9:5e:ec:53:be:
0d:76:ea:9e:10:92:dd:0d:c4:3f:95:53:0e:e7:88:
aa:5b:1c:c4:8f:40:65:97:eb:83:0f:03:21:01:aa:
95:59:5c:b2:09:a3:4b:15:4c:1f:94:38:57:60:de:
52:27:ac:da:a8:57:a8:f9:63:8c:5f:a2:36:89:39:
93:39:43:93:40:85:e1:91:17:a4:29:e9:d0:47:43:
19:1e:00:ea:8f:a1:0d:e8:cb:d7:d1:73:a8:ed:4f:
80:e7:3b:51:75:e2:0a:64:93:ea:8f:ed:8b:2c:3a:
ef:bd:1a:e8:b1:61:cb:a6:69:23:24:f0:e4:52:13:
9a:70:f2:88:48:16:41:ec:2d:ad:93:ea:ec:ed:5e:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:BF:5E:E3:65:92:16:CA:FC:95:66:86:F7:F8:EA:F2:CB:B3:18
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:72:bf:10:f2:0f:e5:11:a4:9d:b7:64:cf:f0:b0:73:f2:cf:
d2:ca:96:e9:09:be:18:70:14:af:ae:d0:5c:d0:d9:c1:bd:2f:
05:51:f2:d1:6f:7e:40:d6:fa:46:5e:9b:cd:66:97:4f:64:ec:
d4:ce:e0:71:7d:a2:ff:ea:bd:e7:15:b7:ed:d4:37:3c:71:ea:
3d:71:e9:8d:e8:b3:fa:8e:c7:4f:36:a7:21:12:19:e1:b0:97:
4c:7d:2d:3a:cd:5c:0c:38:56:2f:71:1a:28:60:81:3d:3d:0a:
19:40:c9:27:10:0d:e9:69:ab:b6:56:b4:c9:96:30:a3:a5:5a:
33:e4:05:05:b5:f4:f8:c4:c9:58:73:a3:62:1c:ad:18:76:3d:
85:48:c0:3d:7a:7b:ac:c9:c3:a2:1b:6c:03:69:8b:a3:f5:45:
61:39:ce:0e:86:34:81:1b:df:de:99:5a:6b:f4:1c:5f:d8:72:
fb:c3:e0:3f:38:c9:79:56:72:c6:92:25:2d:4c:5d:8c:1a:b5:
73:cb:24:a8:fb:97:8c:96:0d:ae:7b:fc:1d:d5:c5:4d:13:b3:
51:6c:cf:74:9a:b1:41:4a:1c:66:a8:28:c8:43:d3:ff:83:b8:
3f:ec:01:02:71:27:8f:fc:d3:4b:a5:3b:38:b9:9f:45:ca:d4:
00:87:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client