Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: nyrBjAZgXuKTRtQPAU1ZC3NopB17EDIxgs/UbhypiE0=
Subject key identifier: 88:05:28:F2:A1:0E:65:5E:7B:FC:68:A1:9F:A8:4B:F1:67:BA:46:26
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 019A7301A8BFFB725D1250DF4453721D333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: OJaL1A2Ww8qI3Ju5xholQTIXdorVPNpBR7MT2th98kc=)
2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a8:bf:fb:72:5d:12:50:df:44:53:72:1d:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=880528f2a10e655e7bfc68a19fa84bf167ba4626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:fb:2e:d5:5e:81:4b:e6:39:29:e3:59:6b:
b3:52:a2:90:a1:64:b3:d0:5e:c7:d3:96:d9:2d:a9:
a4:62:be:66:a9:48:6b:23:c9:88:b4:24:65:69:b1:
03:62:52:8e:80:cc:fe:83:49:75:98:90:c8:f6:4b:
8f:5e:2c:4c:94:ab:08:bd:bc:45:10:fe:ae:43:b5:
af:7a:79:0d:9c:2b:88:9e:a5:62:c8:bc:c6:ce:69:
dc:65:bf:30:4a:9f:7b:72:ad:54:ce:92:76:95:96:
1b:9e:c6:94:f0:24:ea:0b:a3:7f:b0:26:20:7d:84:
a6:d3:71:fa:95:fb:6d:b1:d9:6d:db:9a:29:08:4f:
ac:71:11:73:e3:c7:77:7f:e4:2f:c9:4e:2d:2e:c9:
c0:5b:87:5c:b4:d6:8e:e5:7b:26:98:d3:2f:d2:68:
7a:7f:aa:ce:3a:22:c3:3c:eb:c7:60:d2:d4:98:01:
26:b2:38:b8:31:59:1d:90:48:46:7f:ff:07:bf:72:
f2:7d:c2:72:40:48:19:62:7f:95:79:41:ef:f8:b4:
b6:42:05:c9:85:d5:74:aa:c5:f0:ec:9d:b6:10:2c:
f2:54:2d:9a:1c:55:7d:8f:77:6b:64:3e:c9:0c:2c:
1f:44:b4:9e:99:09:da:6d:df:3a:40:f4:13:26:b1:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:28:F2:A1:0E:65:5E:7B:FC:68:A1:9F:A8:4B:F1:67:BA:46:26
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:1a:23:54:72:1d:3d:cd:43:79:82:1c:4a:0e:66:66:3a:
9f:a5:b2:f5:57:1e:0e:b7:5d:02:63:ee:dc:95:d1:af:06:9b:
54:80:fa:50:38:4e:89:da:3c:4a:d3:dc:e3:10:df:81:01:5b:
78:e2:77:38:84:aa:fa:6e:c0:de:09:7c:8c:98:40:93:2e:24:
a3:a4:58:04:6f:c9:08:7e:f8:6a:7f:d7:b6:71:44:67:38:e8:
0f:4b:60:a2:7c:a4:83:11:d2:1b:9a:2b:26:c6:d0:49:0a:a1:
23:57:52:c1:87:26:08:aa:c5:bc:37:6f:48:5d:53:8c:e6:e5:
63:80:d9:21:74:c2:93:79:db:7f:69:97:9e:2e:4e:b5:76:0d:
b8:d0:41:5e:f2:ba:2b:e3:05:89:18:3f:64:65:af:fd:fd:55:
e7:16:4b:8c:7c:cd:e3:41:73:09:88:6c:40:be:b5:b4:30:7e:
69:9c:5f:00:f6:c9:5c:da:2a:46:30:4b:a4:dd:25:eb:18:4f:
dd:ea:01:51:c5:37:db:91:12:69:63:36:d0:23:07:c3:29:3d:
21:64:05:12:44:05:19:75:04:87:ae:38:dd:6c:df:25:ad:b5:
8a:99:99:7a:3e:e2:8f:d7:04:47:3d:17:7e:ae:80:a5:6a:2d:
63:81:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:40 2025 by rpki-client