Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: 6Jxho0tdhoGDCkEq+wcSSiWpVRrsdk5yUMEXhdliB+M=
Subject key identifier: 28:AA:12:68:55:78:F8:83:F8:20:11:6F:74:BF:7A:98:42:EF:AC:4E
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019A711335C648B6725025AF1EDA2B72D39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 142C
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: S0cK5BhIvN5GU5/JKjC33PiOXNpB9lKCDogw2EnuAwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:35:c6:48:b6:72:50:25:af:1e:da:2b:72:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=28aa12685578f883f820116f74bf7a9842efac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:b9:9c:54:cb:1f:c4:34:87:a6:42:17:07:
83:ec:5f:a0:bc:21:a1:9f:1e:84:2b:58:e1:ab:04:
13:52:97:3b:53:fa:89:ea:18:ac:40:14:79:4a:ed:
c1:52:d8:b2:0f:02:ee:ff:f7:62:96:95:47:cb:6e:
84:19:29:e2:56:d3:0d:75:15:bd:df:65:05:00:a8:
1a:41:f9:24:7d:00:4c:42:76:a6:a3:a7:68:90:e6:
06:53:c9:ec:2c:5b:94:80:30:c6:2a:bd:d7:c4:d4:
56:76:38:6a:fb:06:10:4d:bf:84:1c:c4:99:4b:20:
d9:a1:73:42:2a:11:21:b0:b0:10:b5:0c:ba:91:74:
ef:41:65:6d:42:ef:61:17:cb:eb:67:2f:e6:57:56:
91:3e:72:b8:3a:75:ce:05:a7:f0:55:2a:10:9f:65:
62:7e:29:e6:2c:99:cb:16:40:e6:4f:14:9a:3e:b9:
fb:57:33:66:c8:0b:74:56:c4:a0:d9:72:7e:91:66:
d7:87:a9:f4:37:bc:94:5f:44:2d:1d:14:ff:3e:ca:
2a:1b:0f:fa:9c:84:39:e1:ae:75:7a:d2:4e:2a:05:
45:5e:36:09:a8:26:86:49:e7:4f:ac:5d:5c:4a:66:
22:24:e4:ab:14:43:30:b5:7a:12:27:5a:54:da:58:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:12:68:55:78:F8:83:F8:20:11:6F:74:BF:7A:98:42:EF:AC:4E
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3a:71:ce:4c:18:2c:d8:de:2e:db:07:b8:72:35:54:af:7a:
8b:46:23:8a:60:48:d6:21:fe:57:d4:28:d0:ad:ec:08:32:c5:
a7:fa:a3:4a:50:70:d0:6a:12:59:e2:b1:0c:b6:f3:5f:9f:34:
a4:ef:b4:fc:89:0c:39:76:fe:88:6f:e8:ae:ea:bd:67:9b:ac:
25:24:c4:02:e1:19:af:de:59:28:8c:6b:70:82:a4:cd:ca:a4:
bf:04:14:1a:ff:f9:38:ed:90:50:2c:df:71:dd:3e:99:60:c0:
05:cf:ae:6d:d0:54:c9:95:eb:d5:bb:e4:00:8d:0f:6e:3d:45:
55:fb:3c:14:0b:57:15:d1:d3:3c:75:d8:19:42:79:54:01:56:
52:b6:30:3d:a6:28:eb:dd:6b:a1:d6:5e:7d:96:b9:e7:b1:ff:
f0:37:b9:0f:62:9a:ec:7c:02:85:b0:57:fb:f2:29:32:5a:de:
9d:2f:4b:10:79:1a:90:6e:72:f2:57:6f:f0:5b:58:e5:a2:9f:
b0:de:8d:06:ee:e8:a1:c0:11:73:87:9d:f8:17:a7:2d:67:b3:
63:f5:8f:17:e0:ef:e0:19:dc:31:01:d7:67:cc:7e:a7:06:ad:
56:2d:34:09:f7:b4:ac:80:98:19:73:41:1d:c0:12:de:45:7d:
0e:1b:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:33 2025 by rpki-client