Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: 2JuCbOLpqTqftlbUuQnDWuhNQTK6hLXGkcQKukiHMKw=
Subject key identifier: 3E:94:AE:B4:A0:56:3E:86:68:C6:6E:27:F3:1E:7C:D2:54:46:3E:16
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019A7112C2B8FB041AF1B859E81A194C0D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: 171gWHDnUrdBeBOw9m4Ry1BVUlNtAdqbU5KHix8KS2g=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c2:b8:fb:04:1a:f1:b8:59:e8:1a:19:4c:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=3e94aeb4a0563e8668c66e27f31e7cd254463e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:3c:22:6d:24:fe:a3:8c:9f:9d:52:a7:29:
5f:c7:32:e5:5d:3e:37:7e:af:24:26:19:25:db:a2:
11:7e:8c:a4:e9:2d:ef:91:39:f4:5c:7b:f3:31:76:
87:d5:18:ca:e3:37:4f:70:63:4d:6f:6a:d2:36:5f:
a4:4f:a6:79:b9:ca:b6:38:6b:5d:b7:a3:7e:d6:41:
ec:42:d3:4f:a6:1f:80:c9:e1:7f:b8:5c:0f:35:cf:
5f:1a:11:5a:90:02:8f:76:06:ac:f8:9f:0a:ed:da:
e5:e8:9f:28:43:62:83:b8:ff:7c:1b:02:e3:cf:03:
b9:6d:4c:ee:33:c1:c1:4e:e6:04:2d:df:d3:8f:21:
71:19:e4:d2:be:a1:fc:fb:a4:02:35:4c:64:0c:0b:
84:12:f4:6e:9e:a6:b5:cb:b2:76:79:b0:3c:e4:82:
84:82:ef:ac:e6:84:91:aa:d0:b7:3a:ca:70:e0:e1:
0c:8e:15:3e:ff:5d:b0:ae:ef:3c:80:97:f3:56:59:
47:28:25:11:c4:e4:fa:5c:f5:f2:bf:41:b4:56:c6:
a7:01:01:73:4c:5f:41:33:bb:a5:f7:55:39:cc:54:
07:03:44:4a:98:32:7f:90:15:9d:cb:4f:05:87:26:
71:68:9a:46:bb:93:42:40:d0:bf:20:49:34:c7:2b:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:AE:B4:A0:56:3E:86:68:C6:6E:27:F3:1E:7C:D2:54:46:3E:16
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:45:62:e2:c0:2e:2b:05:45:96:5a:21:84:ca:a4:63:ed:
64:f4:4c:56:4a:8d:46:7c:9c:8d:16:4a:b6:04:52:64:02:50:
42:49:c1:dc:5c:bd:cf:b8:1e:be:c9:ef:55:fe:f9:13:8c:e8:
e0:11:8f:f6:67:b4:15:3f:5d:fc:34:d8:62:c3:2f:24:4a:7e:
f7:24:a9:f4:e0:24:72:20:cb:d4:56:ab:62:2b:92:86:6f:6c:
59:47:c8:80:54:a8:07:4f:05:8e:de:42:29:8e:79:93:f7:10:
69:71:cd:10:bf:07:5f:6d:ac:6a:38:78:b4:8d:d1:be:78:71:
68:3c:9b:4f:6a:94:a5:d7:b1:29:c2:d7:9e:11:24:2a:3f:9a:
28:27:4b:12:5f:73:39:27:f0:20:95:7f:4a:19:b8:c0:4f:32:
f0:8c:2d:78:7b:1c:fe:67:91:85:c4:df:3f:47:bf:53:1a:05:
c7:89:32:38:6a:ec:f1:58:6a:53:e8:46:68:1b:9a:74:3b:5c:
c3:bc:05:68:89:e2:e8:6c:6a:db:52:f8:2a:4e:bb:7b:92:a7:
22:0a:8e:42:84:fd:16:e1:dd:e2:e3:87:cb:1b:30:c3:2b:5d:
e8:63:07:8c:68:bc:d9:8c:18:c1:e9:ea:e2:19:c3:37:16:0f:
59:95:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client