Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: AvoQmWMAvWRkcfO1wj7GiK1F7dNg0WfSZM2498S7h2I=
Subject key identifier: 57:D6:19:79:C5:86:61:88:43:E3:8E:08:83:55:5C:C9:9B:FE:72:DB
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019A722625ABE7538AF258E2B7A63CFE5396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: HyxucuDU+/REsk5OQzveZL4vSPmkG0c8FZQKGSKgtMU=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:25:ab:e7:53:8a:f2:58:e2:b7:a6:3c:fe:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=57d61979c586618843e38e0883555cc99bfe72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:77:d6:06:68:aa:e9:40:17:e3:a1:fa:20:
43:fd:09:c6:93:83:96:3b:9d:62:f0:f3:d7:78:d8:
d7:86:86:05:b1:eb:a1:ed:4c:47:7d:27:2b:74:79:
dc:2d:d7:5b:18:e5:6f:fe:c0:0a:99:81:40:f3:69:
98:7b:ef:a1:d6:37:35:31:02:5a:cb:35:88:08:48:
1b:fb:47:14:de:15:65:fe:60:e2:25:0d:6a:af:09:
91:bc:7b:3f:96:c2:98:8c:41:45:36:ca:9d:2c:10:
91:35:d5:b2:3b:fb:08:c4:44:cd:c1:c8:cc:ce:49:
6b:a3:4f:bb:51:4b:0a:1b:e9:25:29:13:6a:b2:4d:
df:54:a1:8d:75:cb:3c:36:14:b2:b0:b1:d8:b2:c7:
68:29:6c:b2:49:84:a6:60:23:88:5c:04:5a:2a:b2:
af:93:37:dd:cf:1c:93:26:6e:60:13:73:e6:d8:5b:
87:a9:c0:76:db:d2:5e:c8:69:9b:cb:e2:61:48:64:
60:e1:87:c8:e7:5f:5a:8d:73:8e:27:88:6c:01:c5:
d0:56:d0:72:c8:e4:3e:41:2e:18:4d:9c:fb:31:db:
89:fb:b6:9b:88:66:5f:cc:46:25:66:52:4b:3c:9c:
57:89:a5:95:97:e4:95:79:c2:e3:4c:e7:45:88:0b:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:19:79:C5:86:61:88:43:E3:8E:08:83:55:5C:C9:9B:FE:72:DB
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:eb:14:a1:ac:0c:49:6e:e0:69:a1:18:d0:ec:7a:82:a1:
07:cf:26:fa:71:58:3c:4c:6f:f9:46:7a:99:6b:3e:4e:da:de:
0b:5b:e1:69:68:ad:c6:1c:a6:56:25:90:1c:78:87:68:2f:11:
12:ea:18:6b:7d:b1:fa:05:b8:7a:38:8d:0e:6d:9e:c3:7e:dc:
47:fc:80:02:31:ce:97:4b:01:3b:d2:ee:e5:69:b6:b5:b7:78:
a6:5c:cf:13:49:30:40:e6:4e:4a:be:13:20:83:b0:dd:1d:a3:
88:b4:a7:f1:d4:99:f5:63:90:f6:84:6a:27:ce:44:46:ff:48:
f8:ca:6e:2f:8e:b4:28:96:4b:1a:66:50:e2:93:6d:0f:a2:30:
f1:15:57:87:fe:f4:33:14:48:d0:ee:ba:68:85:16:00:69:05:
33:23:51:d2:ed:4f:06:61:eb:55:78:0d:d7:e4:4d:1a:2c:fc:
e9:7d:43:19:56:5f:74:ea:01:f0:99:11:d5:a2:b0:3b:f7:a6:
4e:bc:84:fd:7e:fa:3c:38:4b:d1:d1:fc:e2:96:07:50:4b:08:
47:16:32:81:2f:96:42:c6:10:35:1c:47:4e:1b:15:a6:58:74:
02:97:7a:39:f7:fe:cf:77:5b:14:0d:fd:bf:75:8d:e2:e8:0d:
1c:35:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:52 2025 by rpki-client