Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: oq3VG1bAVzLuahe8fZX75gtNfRTg0z+S5puJdrmohrI=
Subject key identifier: 32:54:2C:6A:7F:3A:11:57:D4:15:85:51:DF:98:8E:9C:0A:09:4D:C8
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019A71EEDD4153CF15E668B60809BA616DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: 5SzjEZrqLQ/mmBH+O20YR52pI08jqVLiUtucJLvlxGc=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:dd:41:53:cf:15:e6:68:b6:08:09:ba:61:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=32542c6a7f3a1157d4158551df988e9c0a094dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:cb:88:ba:14:99:fe:8b:1d:8e:b5:c1:45:
9e:fc:50:1a:a2:0f:68:fe:49:54:dc:85:04:ce:e1:
c0:79:af:7c:be:be:b8:aa:ca:c5:7c:3e:69:d2:51:
36:e7:87:b2:a3:2e:00:f4:98:74:1f:fa:24:f1:10:
3b:0d:5d:bc:7f:6b:8d:33:65:49:0d:75:4d:b7:d0:
e0:a1:fd:86:aa:2f:d8:37:5a:2c:d9:03:21:31:e0:
9d:ff:47:2d:e3:41:60:da:66:f0:a1:0b:f4:b7:4c:
48:80:24:20:cb:57:c6:69:e1:37:f2:eb:44:62:71:
61:4d:81:89:c6:f6:fa:38:3e:4f:d0:1d:31:68:d4:
20:0d:cd:c5:1b:36:14:6f:54:52:42:19:55:3b:ad:
94:ef:37:b9:f9:03:3a:41:eb:42:2b:9d:f6:0a:13:
6c:f0:34:5a:95:ae:76:35:08:c5:f5:14:36:f8:71:
be:cf:ac:d5:4f:3f:f9:9a:aa:30:64:0a:a9:70:97:
11:c8:98:8a:88:90:d2:8a:9f:98:a8:58:f1:97:a9:
b6:28:ee:1e:58:7e:2c:50:9d:48:63:be:e9:6c:fc:
f5:68:8c:20:15:c6:6e:04:4e:35:00:97:c7:f2:6e:
fb:f4:8a:fb:71:70:9c:26:52:ad:aa:ec:36:45:37:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:2C:6A:7F:3A:11:57:D4:15:85:51:DF:98:8E:9C:0A:09:4D:C8
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:80:3d:c9:b4:71:7e:38:d0:89:bd:bd:7c:8d:aa:15:56:
82:63:4b:d5:a8:10:76:ba:fd:4f:95:2b:5e:79:dd:b0:9a:80:
27:d9:de:72:fc:9f:85:bb:98:e4:7a:28:e9:9a:d8:3b:7f:73:
bb:b5:7a:46:b5:8f:15:fc:d3:c5:dc:5a:25:9c:31:5c:4a:82:
4d:d9:8e:7e:e9:28:db:c5:36:6b:2a:14:df:97:8d:4b:25:6d:
97:2a:13:bd:d4:65:8f:bb:40:e1:c2:95:55:dd:07:bf:93:0d:
3f:b4:4a:14:9b:a3:a7:1e:68:4a:06:cd:3a:61:77:3f:e1:ef:
25:b0:d6:e8:fa:99:ea:9e:7e:7b:c6:31:3d:bd:7a:57:3d:a0:
d6:9e:33:bb:9f:3e:be:df:de:f5:30:c0:9e:03:af:7c:02:01:
49:62:fc:ae:03:de:cb:f6:60:40:51:1f:0c:29:34:3f:30:ef:
bd:d2:12:ce:30:4f:1f:a8:e0:a2:b7:e7:2b:71:46:dd:fe:82:
56:16:be:ba:82:23:ea:1e:69:5e:d4:e1:0a:42:04:69:41:d6:
df:c8:2c:b6:da:c0:8b:51:2d:c4:77:a8:ee:72:fa:2c:e6:82:
29:7a:b1:78:33:a4:e3:4b:55:a5:86:75:87:22:cb:90:13:fe:
97:70:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:47 2025 by rpki-client