Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: aJy/wS7rx3zUnSfiTFRjUMdZ59d2m8Eglsz47y0NMuk=
Subject key identifier: 7C:76:6E:B3:C1:11:DF:E8:3F:C8:6D:EF:38:C8:BB:81:06:3A:D5:3C
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 019A72CA998ED090C5276FCF2980A473E19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 1318
Signing time: Tue 11 Nov 2025 12:01:11 +0000
Manifest this update: Tue 11 Nov 2025 12:01:11 +0000
Manifest next update: Wed 12 Nov 2025 12:01:11 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: ZSIkI7yErUYHJ3DvLOY9S8UgQF3+/wHkjzlw7/pj/K0=)
2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:99:8e:d0:90:c5:27:6f:cf:29:80:a4:73:e1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Nov 11 12:01:11 2025 GMT
Not After : Nov 12 12:01:11 2025 GMT
Subject: CN=7c766eb3c111dfe83fc86def38c8bb81063ad53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:25:32:ea:2a:6d:25:b8:51:48:08:b3:72:
07:f9:c5:20:5b:42:5f:19:2c:49:02:18:76:f7:62:
52:56:df:2d:6e:1b:32:73:d8:3e:7c:c3:43:32:64:
be:5d:72:d6:08:5c:46:ed:2c:d8:ed:96:d9:d9:0f:
5d:bb:8c:03:e3:ab:2e:2a:0a:12:0b:cf:eb:3b:63:
70:a0:fc:b8:56:68:cd:20:e2:80:76:10:f1:76:a0:
0d:0f:dd:a2:47:3f:66:86:1a:c7:00:39:26:62:ee:
ee:d4:e7:ef:d9:1b:a6:11:45:6a:c0:54:ae:6d:03:
2a:da:84:fc:21:73:33:19:07:08:da:4f:ea:25:93:
e9:80:93:50:e4:1c:9a:00:a1:ee:66:c8:dd:ae:49:
29:72:1e:0c:22:8a:c5:ed:fd:ad:39:e4:8e:ad:57:
6c:af:8c:31:0a:d1:91:58:d8:86:16:6c:ee:74:d8:
fc:d9:86:b4:df:58:d7:88:31:53:1a:57:50:e5:bf:
e7:4e:07:a8:e6:b5:42:ca:34:db:76:42:1f:84:2e:
58:bb:48:29:d2:f2:95:ff:3c:85:7b:06:6a:bb:9a:
6f:92:20:53:1c:78:27:eb:f3:e6:99:14:2d:1c:2f:
aa:a0:37:31:c3:a6:83:33:80:3c:37:9c:17:90:38:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:6E:B3:C1:11:DF:E8:3F:C8:6D:EF:38:C8:BB:81:06:3A:D5:3C
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:94:ba:3f:a3:32:20:3a:ed:14:f5:2c:1d:01:f5:7a:ae:
05:0f:8f:36:ab:1c:0f:e2:75:50:77:ef:ab:21:0b:07:e9:cf:
55:79:a3:b3:fc:db:49:b6:9c:84:90:19:a1:b8:6f:ea:cd:57:
a8:05:e0:1d:ae:e1:50:c5:00:42:75:e1:6f:60:fe:26:50:d6:
c9:a8:b0:25:d9:35:e5:83:73:63:f9:5d:53:fe:79:7b:fc:5b:
46:31:d6:a1:68:59:9a:2c:58:3f:e8:5c:7b:28:94:9e:dd:6b:
51:7c:8f:40:a8:3f:34:d4:06:6f:89:93:52:59:ce:7d:11:0c:
1d:73:92:ec:00:93:24:09:0a:19:0c:ff:c8:6e:9f:07:e7:2c:
4d:84:8a:f7:3c:8b:b9:aa:22:c1:1b:04:b5:f8:29:d9:e7:78:
1d:76:86:d8:8d:34:e6:a1:72:82:f2:51:25:f4:81:21:53:6e:
e2:37:f9:c9:84:72:99:38:44:c2:c2:3b:cc:03:17:50:2f:54:
05:a7:65:98:32:ed:6a:a5:a0:52:c8:7c:e7:2a:f0:b6:ba:6f:
db:57:b3:5e:53:e4:28:55:27:c6:f0:8b:6c:d4:3a:d3:b4:44:
27:74:2b:7f:96:75:2a:79:8f:83:7a:a3:02:c5:d0:f2:b3:6f:
50:cb:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:25 2025 by rpki-client