Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: KeA09zyoqCYDv9yD5DqK9dmnuGpElP3C22uT1RJiIV0=
Subject key identifier: A9:5D:56:3E:3D:50:84:B2:3C:96:38:B1:97:D6:48:57:D0:36:38:26
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019A71B7EB508122CDE210D1A228A60ED7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0827
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: VjI8Aye0luLdfGtagZLtRcnfK+s8BJnnAhfaVMqdixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:eb:50:81:22:cd:e2:10:d1:a2:28:a6:0e:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=a95d563e3d5084b23c9638b197d64857d0363826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:8e:6f:5e:e9:87:67:6e:b9:07:f5:24:77:
67:f7:57:b6:17:5d:ba:99:f6:be:30:e2:9c:48:e1:
69:66:91:30:b4:20:b4:a5:3d:9e:62:84:7a:3b:34:
b3:e0:3f:7c:a3:b9:92:33:ca:8b:04:70:b4:81:c9:
83:8d:7d:6a:b0:7e:ad:12:b1:0a:ef:fe:69:31:1a:
80:fa:e0:00:0c:45:01:f1:d1:ca:6e:bd:05:d9:e6:
10:66:c2:4c:8e:cd:8e:df:4d:82:57:ff:35:dd:b1:
da:1c:fe:ac:3e:aa:49:79:1b:40:62:91:00:d3:78:
3c:c6:3d:22:59:41:5c:8a:9e:15:32:2d:c4:7c:c9:
a8:b1:e1:5a:9d:e2:ea:a7:9a:52:e1:e7:2b:28:32:
2f:62:ff:46:18:d9:e8:7d:e8:fe:85:88:ac:65:fa:
50:36:5e:e5:92:25:7c:80:4f:60:4f:f5:c7:d7:f9:
51:ad:07:ac:8c:35:b6:bc:ab:1c:17:8b:01:9f:bd:
21:ad:78:a9:ce:b0:f8:26:1f:61:df:6b:c4:9e:20:
2f:00:b8:25:d6:d4:21:03:d9:2e:25:47:54:6d:21:
80:3d:e5:42:42:62:9a:58:f7:da:5f:83:eb:5f:27:
dd:ce:ed:95:cf:f3:97:9b:19:3f:04:44:51:9b:bb:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:56:3E:3D:50:84:B2:3C:96:38:B1:97:D6:48:57:D0:36:38:26
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a2:5d:c0:67:e2:9f:7e:6e:b8:f9:53:03:9d:39:a1:a9:60:
20:fe:78:6b:fa:77:d3:82:74:e5:37:e3:f3:50:d3:67:18:79:
d3:aa:80:7b:3a:74:94:34:2e:47:05:57:a1:8a:a9:08:4e:f6:
63:3a:89:84:3d:0f:b3:a8:2c:ec:c8:a9:ac:f1:2b:c9:46:9c:
f3:c6:9a:bf:1c:7c:fa:1f:73:56:99:e1:f1:d5:7c:4e:cd:5b:
05:33:06:8e:a4:78:e3:0b:d4:c9:bb:7b:77:30:ce:79:93:c7:
fd:4f:cd:45:23:db:be:7b:e9:2b:31:c2:e0:6d:e0:f8:4d:7f:
9e:28:2f:df:2c:bd:11:66:f3:83:15:11:02:25:af:75:81:b6:
a6:e5:4c:bc:bc:89:59:89:4f:d9:56:04:9e:19:39:27:20:00:
81:13:59:17:0d:ef:5a:1d:58:27:24:81:a7:44:21:c5:02:3d:
c3:65:f3:5e:39:3f:cc:68:3a:e7:44:9e:5d:2d:43:70:3d:93:
9e:17:df:b4:be:ea:5c:36:e1:39:15:12:04:f9:9b:0b:54:82:
71:a6:24:b3:2e:f0:21:4a:f1:5d:f8:b5:cd:f0:a8:ae:8f:b5:
e8:d7:35:7a:c9:cc:dd:c5:36:41:20:8b:57:4b:e6:44:f0:78:
4a:83:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:42:56 2025 by rpki-client