Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: OsVrF2M0hLt0B+ALqhYs1X6h6m+P1T4+ZgxNJ4vJgs0=
Subject key identifier: C8:59:87:8B:15:47:6F:A9:BB:50:3E:D5:40:C8:2F:48:2A:A3:2B:21
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019A706DF877F0C8708A4745CFB1BA9CF98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0A94
Signing time: Tue 11 Nov 2025 01:00:46 +0000
Manifest this update: Tue 11 Nov 2025 01:00:46 +0000
Manifest next update: Wed 12 Nov 2025 01:00:46 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 82AO1eaTpq8kR3eEhxrJ6X3kHVhXdS6qM7UC44mN50Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f8:77:f0:c8:70:8a:47:45:cf:b1:ba:9c:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Nov 11 01:00:46 2025 GMT
Not After : Nov 12 01:00:46 2025 GMT
Subject: CN=c859878b15476fa9bb503ed540c82f482aa32b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:99:87:d7:97:a3:ab:91:fd:cb:d1:8b:e3:
6a:c4:7b:db:53:6d:25:01:e2:e8:87:64:a8:34:9e:
78:07:e4:41:1a:2d:b4:05:ea:8d:7e:e4:a5:85:10:
5d:6a:ce:e6:8e:a6:e6:0e:a7:bb:dc:13:e5:0a:b2:
e0:38:00:eb:fa:85:ae:ea:18:04:6f:0a:f7:ed:83:
46:d5:66:3b:f4:83:d1:c7:d3:df:e0:51:a4:f7:38:
06:cf:7f:06:99:4a:1c:41:1f:b3:9e:95:4e:bc:c5:
0f:03:4f:c5:8c:ff:81:23:d9:8f:e6:27:d3:0d:0a:
50:e7:04:22:70:7d:e3:2d:82:55:85:ce:f6:5c:21:
94:c8:bb:7e:49:99:c4:85:58:35:cf:e3:d7:79:38:
33:8b:0c:ad:0d:88:6d:76:4d:b1:46:d8:9a:4a:4e:
68:9f:fa:9d:28:24:bd:18:6d:2d:f0:0e:b1:e0:05:
ca:18:c1:a7:ab:b6:8d:c8:c1:e7:bb:70:8e:ed:69:
d3:68:f9:05:d4:6b:74:76:3c:71:6b:60:6c:8e:97:
2b:1b:18:14:e6:84:27:bd:ac:11:12:5d:17:a0:37:
2b:8e:3c:69:a8:7e:10:59:20:c3:31:b4:76:40:db:
ee:80:72:0f:2b:92:e3:af:91:51:d6:8f:60:f1:7e:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:87:8B:15:47:6F:A9:BB:50:3E:D5:40:C8:2F:48:2A:A3:2B:21
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:7c:5b:62:fa:4b:59:d8:ba:84:e6:4f:c4:bc:7c:7f:0e:
2e:37:65:0e:02:13:f3:f6:39:06:44:7e:29:82:4e:54:a2:c4:
7f:c1:b4:9f:42:75:be:e2:5f:70:c7:6b:b7:53:f8:ed:30:f9:
aa:2b:cd:4a:1a:1b:6a:a1:11:19:0e:38:1a:d5:a3:0e:b0:0d:
55:09:41:63:e2:76:18:1c:10:bf:63:a0:e7:c7:23:da:61:82:
40:c2:0c:d8:16:f8:40:68:e8:00:c2:c0:4d:4c:72:cd:ad:01:
76:3c:19:25:c2:d9:ef:1c:84:70:71:e5:e0:17:7d:72:09:bb:
8b:a8:72:d6:bc:4b:e0:68:56:48:4d:42:7d:c7:4a:c4:cf:bb:
ef:f3:ae:a9:5f:e5:50:ba:03:6f:de:29:fe:60:aa:49:f9:53:
12:ea:93:5e:14:e5:66:38:34:55:12:b9:b5:3e:2c:af:9f:f6:
e6:ab:7d:97:22:19:4b:70:1f:7c:e5:bb:a8:5d:bc:ac:b5:8d:
5f:ea:60:76:d5:9f:06:38:a7:8d:22:0e:ce:36:89:68:93:ad:
a9:a2:58:46:96:95:11:18:f8:05:08:dd:cb:51:63:e5:96:35:
e4:10:1c:6f:5b:85:50:5c:9d:fa:f3:e2:13:5d:fc:d2:40:c5:
e8:d2:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:32 2025 by rpki-client