Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: eI6OaeeVeSXdiGg42WTt/g+6s/WaaUmVsa/ydW7AER0=
Subject key identifier: B6:B2:3A:CA:52:EF:12:43:1E:F0:4D:49:35:10:E4:C1:DB:73:20:86
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019A7149FE2A04E687612FCC9ACD196EAA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 02B4
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: +KvEiDNImxXmJ564nw7c/O+ObnSU93qJfow80COEU38=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fe:2a:04:e6:87:61:2f:cc:9a:cd:19:6e:aa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=b6b23aca52ef12431ef04d493510e4c1db732086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:9b:87:d1:c3:18:ed:ec:7c:3a:5b:d2:d2:
07:c1:82:02:a0:c5:e9:d1:9f:6f:90:4f:6f:96:f8:
70:9c:dd:7b:0e:0c:5e:57:ca:c2:08:d6:75:a5:67:
65:dd:02:db:c5:c3:e8:1f:fe:06:30:34:f5:92:9a:
5f:80:6d:cd:2a:f0:98:ce:b4:07:72:cb:55:3b:9b:
c7:88:cc:ee:c5:61:de:ee:ee:e8:b1:34:fd:15:74:
10:7c:dc:de:8e:4f:b2:98:fd:8d:ac:cc:45:be:49:
21:5c:ea:d4:cf:4d:a4:dd:ff:af:58:df:1e:0d:56:
01:ea:c6:9a:56:d1:97:6d:cd:0a:98:82:8b:19:56:
8f:67:b2:95:cc:5b:31:a4:a9:64:53:25:07:98:fc:
dc:bf:07:e2:d1:69:17:f5:24:8d:36:17:25:84:75:
e8:db:32:21:20:fe:60:70:00:b8:8b:b3:91:5b:29:
16:82:02:d7:1f:3c:29:cb:4c:bb:ab:98:08:8b:27:
72:aa:21:9a:83:14:19:e2:c9:29:01:99:58:10:65:
6d:8f:88:fc:95:dc:a3:7d:5b:55:fd:e0:94:ab:8b:
82:1b:a6:06:ea:44:4f:9a:12:11:a1:4b:f0:b3:48:
c3:10:6a:02:6a:79:80:1d:0a:2d:cd:de:6a:03:82:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:3A:CA:52:EF:12:43:1E:F0:4D:49:35:10:E4:C1:DB:73:20:86
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:d1:c9:a1:0b:94:27:bf:28:3f:db:62:98:19:be:d0:c0:
2c:55:a2:45:e6:ec:75:8f:33:2a:0a:05:d9:3c:3a:8f:6d:44:
9a:9e:01:2f:e5:af:b8:f0:11:4e:ab:00:f7:fd:06:ea:9b:fb:
59:9b:8e:5d:f0:a1:a3:80:0c:34:4e:2d:91:b2:2c:3d:76:fb:
c4:fa:5f:90:b4:e6:4b:c7:d0:4e:8f:a4:78:41:00:b9:eb:92:
08:40:b2:6a:05:34:80:18:a9:a3:ee:10:31:d7:e1:67:dd:a6:
0c:1f:99:00:6d:59:d8:d0:d9:96:32:14:f7:b1:d8:3c:dc:ad:
2d:ed:3c:68:f2:eb:78:64:25:4c:10:40:19:ab:86:ba:76:e7:
3d:c2:77:36:57:0c:2f:9d:ed:06:73:4a:4f:fd:16:0d:2b:b9:
13:12:45:b5:20:13:8d:84:fa:b9:d1:44:d2:90:eb:6c:bb:4a:
cf:87:ba:ee:33:83:77:4c:ff:80:54:de:c5:43:9f:a9:76:e1:
bd:29:62:0f:60:01:ee:b4:bd:0d:c1:9e:21:4a:b4:13:66:90:
b9:12:ff:24:43:db:18:92:b7:c6:f3:c2:58:d7:05:3f:4b:77:
04:d9:a7:ab:f5:28:11:73:0c:a7:94:4d:e1:0a:f2:b5:f0:e1:
cd:35:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client