Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: 1DaBJWFThMnvi4xhlN+OBkK/4qgCwTIsov05cTB9uKQ=
Subject key identifier: DC:56:DC:63:82:39:E4:47:4A:46:81:BD:E9:60:7D:3C:87:D0:A2:C4
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019A251CCB79FDA754E200255AE5209990BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 05C3
Signing time: Mon 27 Oct 2025 10:00:35 +0000
Manifest this update: Mon 27 Oct 2025 10:00:35 +0000
Manifest next update: Tue 28 Oct 2025 10:00:35 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: mni2IkfJwbjEBJW0XblB4agKoDdWPMdq1nt43j18diI=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:cb:79:fd:a7:54:e2:00:25:5a:e5:20:99:90:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Oct 27 10:00:35 2025 GMT
Not After : Oct 28 10:00:35 2025 GMT
Subject: CN=dc56dc638239e4474a4681bde9607d3c87d0a2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:9c:d3:9a:a3:9a:cf:16:ee:f5:75:60:9a:
de:9d:9b:fc:b4:22:e0:ae:c4:4a:ae:b7:ea:91:63:
f0:4e:13:a2:91:f3:b6:b6:a5:57:f0:06:9d:12:8a:
83:36:c8:fd:79:cd:ae:8f:58:8c:e7:e3:77:25:fc:
c3:2d:40:05:89:cf:58:89:62:bf:9c:ab:2a:cb:16:
ee:ba:cf:38:f2:da:61:92:cc:6b:39:ce:d7:93:ef:
f3:ff:6f:4f:f7:9c:3c:8e:13:94:a4:f4:78:1e:0d:
a8:c2:80:91:ce:1a:a2:04:29:43:05:6d:fe:f3:4e:
1b:43:c9:80:1d:ab:b5:a2:30:52:8b:86:d7:ce:21:
9d:28:10:58:42:b4:05:9f:7b:b6:c2:f1:e3:9f:97:
e6:1d:94:5b:11:28:8d:29:30:4f:5d:2e:ec:fa:6f:
04:ec:71:bc:fd:37:6c:92:74:bd:28:00:75:af:69:
7c:04:48:25:4e:96:0b:62:4a:c8:cb:b7:0c:f0:91:
3e:47:c8:7d:bd:a7:de:d3:1a:92:eb:d3:b3:72:6d:
eb:59:92:e9:31:4f:12:5a:4a:da:22:b0:14:f1:25:
d8:23:a0:e1:b9:cf:b3:78:00:06:f8:ea:84:f0:e2:
45:7b:4b:9c:81:94:1e:e8:ee:11:9f:cd:6d:37:5c:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:56:DC:63:82:39:E4:47:4A:46:81:BD:E9:60:7D:3C:87:D0:A2:C4
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:44:b3:cc:45:d5:27:33:bf:84:73:e1:1b:6c:f7:c4:83:6c:
7e:05:8c:9f:d7:f5:41:7b:ac:50:14:99:98:af:51:54:1a:a8:
4c:11:e1:29:5b:8f:b3:03:6e:a8:9d:57:d3:55:4f:3d:b9:44:
8d:ff:a4:48:0b:ee:2f:72:0d:4f:0d:c2:38:6c:60:29:78:bc:
58:a8:33:d1:c6:78:5b:ef:9a:20:53:c9:2e:f3:5d:12:f0:10:
46:8b:4b:e0:d1:fe:99:62:bd:19:cc:3f:4a:be:c2:93:81:6b:
63:e1:5f:9d:52:bb:ea:ac:70:6c:8b:55:8a:61:e3:d3:83:31:
77:7c:68:68:55:55:10:24:f9:9b:b3:1a:a1:67:47:e1:93:c3:
2b:fe:38:0d:70:22:16:4e:d9:5b:17:07:c0:52:e7:90:6a:35:
08:3a:eb:13:41:25:be:a7:56:1c:b5:26:97:01:2d:5d:08:44:
9b:e5:ff:ea:55:ce:99:00:aa:37:a1:31:f3:7b:a8:b3:67:bf:
09:73:60:d5:b0:a2:4f:a5:f3:ed:fd:81:f8:39:c8:6f:32:74:
a6:ff:d0:46:aa:da:e6:90:ea:b6:9c:55:1f:63:fe:7c:ea:bd:
81:15:1e:7f:95:d3:c8:42:22:55:85:1a:dc:42:1b:0c:b1:5e:
c0:af:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:16 2025 by rpki-client