Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier: gKfYHC6rBgpm8e1GPM8oeJT2HyXXDA4yg7x2ofholJU=
Subject key identifier: EC:0B:1D:AB:C3:92:80:69:46:5D:5F:D2:EF:42:81:E0:84:DA:1A:48
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 019A71B87F5E49C275C88F12CF24751E8B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number: 067F
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: ebBt1QXZBiPfKbDeZJQTw0pDXIbb8E/efHz0r71B2bU=)
2: UzjmKBXy8gum7-vzXEXY9qRXHJg.roa (hash: rXm+F/jMusDQ+vIPMdo+lZ7IaHnnszuMtgWpHGWtSR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7f:5e:49:c2:75:c8:8f:12:cf:24:75:1e:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=ec0b1dabc3928069465d5fd2ef4281e084da1a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:bd:5a:ba:37:eb:07:15:15:70:3c:0f:26:
41:d4:af:8c:d4:7b:d5:d2:eb:ee:9d:a3:ca:d9:f6:
fc:78:99:4c:b0:f6:1c:05:7d:5b:2a:c3:2f:a2:5b:
66:17:b3:b1:c9:1b:bf:da:46:77:48:22:3e:75:6f:
67:74:5d:29:71:77:8e:63:88:81:cd:a7:cb:15:d7:
ed:a4:9e:e4:d5:79:0d:d7:e2:7d:89:e9:c4:4a:bd:
91:c3:6e:0a:e2:84:4d:cd:6b:05:88:84:f5:48:58:
33:b2:a2:37:74:a0:45:6c:fe:67:63:84:db:44:6f:
22:6b:03:56:fe:c0:9d:46:c3:53:fd:cf:19:c2:79:
e2:4b:30:13:79:cc:e6:45:17:56:ea:c8:4b:53:13:
6d:62:5d:b9:5e:60:4b:46:0d:f5:56:8e:c5:63:4b:
6f:24:32:54:ff:64:12:ea:55:fe:80:2f:cb:2b:fb:
f2:13:1b:3f:59:ce:3a:94:68:40:8f:87:0a:fb:b7:
78:e2:1a:c4:e1:fa:8d:0e:98:c7:10:c6:da:f7:b6:
04:a7:9b:29:67:2d:b3:76:ad:2b:b4:9d:7b:ae:7d:
c0:56:0b:3f:af:5a:02:2f:84:67:e0:59:ef:7f:06:
cb:e2:b4:ba:b4:da:6f:02:ff:cd:89:00:76:85:7e:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:1D:AB:C3:92:80:69:46:5D:5F:D2:EF:42:81:E0:84:DA:1A:48
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:00:a9:6d:36:c3:e8:12:e6:65:3d:cb:c9:59:67:46:26:e0:
4c:0b:95:d2:1a:9b:df:d3:96:4f:78:40:8c:d1:db:ae:31:50:
8e:9f:10:12:15:a4:fa:46:e6:ab:6a:ee:75:7d:fb:17:6c:a7:
32:27:15:b9:88:91:3e:70:7b:7f:01:96:e2:44:f2:92:21:df:
27:0c:aa:9b:76:75:b0:8b:4e:73:79:88:b0:50:3b:0b:4c:ef:
b5:32:cc:d3:e3:55:53:4a:d5:c4:22:7b:f7:5f:d9:7d:3f:32:
f4:30:f4:f0:8c:80:2e:1b:b0:97:d6:d9:4c:00:5f:da:62:50:
7c:ab:05:3d:91:a7:98:a8:fd:38:cf:99:fb:b0:74:4c:27:6b:
cc:c5:4d:5c:28:14:62:0b:f5:23:89:b7:99:a7:52:ef:79:c5:
d8:74:b6:94:23:03:db:e1:64:88:8f:a4:83:f4:c4:b3:58:73:
0c:5e:35:69:82:73:47:db:5a:16:05:8b:4a:a4:f9:4a:8b:af:
2f:97:f8:40:7e:b6:bf:30:51:3b:27:e4:8c:9c:dc:5c:82:19:
98:0f:a5:eb:fa:6f:21:09:c0:b8:8b:93:c7:2b:d4:59:76:95:
cc:77:e5:63:fe:40:85:10:62:bb:25:bb:8c:d8:92:fc:63:7c:
85:bb:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:38 2025 by rpki-client