Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: qJLR4RpIW8BMUN/A5+ktip72gPl3NvU2nxJg1K8vFPs=
Subject key identifier: D8:B8:28:3B:C1:DC:14:DD:99:FF:DF:7E:DE:2A:06:A8:F6:49:0F:DC
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019A725CA85544C154C594A844664E559F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0DD7
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: O70M+hC5zzC+J2lsjYM6a/it9yycLc/4LeHNkKdR7Ps=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a8:55:44:c1:54:c5:94:a8:44:66:4e:55:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=d8b8283bc1dc14dd99ffdf7ede2a06a8f6490fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:1e:80:be:2d:7b:7e:6a:ad:1a:cb:20:0e:
c5:70:24:5c:d8:41:fe:de:87:d1:9b:c0:7a:9c:4c:
9a:04:37:a7:7c:6d:b6:5d:15:d9:2a:5a:b7:9f:1d:
da:97:06:aa:de:4e:ae:63:91:93:e8:81:ac:95:71:
40:56:67:5e:42:74:c1:1c:61:c9:e1:c6:14:64:02:
4a:51:49:6a:69:f3:8a:98:08:cd:30:14:ee:60:36:
66:82:47:1e:fb:10:1f:88:13:fd:11:e2:bc:f9:a5:
36:59:41:7f:f1:16:2c:17:2d:2c:5e:22:60:1e:84:
82:4e:89:74:ce:d2:b6:37:a5:d6:95:d6:7c:ef:ad:
82:fe:91:ef:8d:73:bc:ce:c1:f0:fb:b4:2d:d8:37:
94:06:66:17:d8:79:8d:c7:fc:62:2c:ff:9f:5b:17:
3c:c4:8a:11:ae:93:5d:70:2f:52:41:8a:50:9d:83:
e6:d0:7d:ea:ee:fd:59:a9:ac:76:62:9d:1d:a9:34:
6a:79:3f:22:7e:06:5c:00:77:17:5a:a7:e3:61:b6:
f5:66:99:08:3c:2c:dc:ba:ce:49:4e:db:c1:d7:19:
09:2f:ab:52:65:74:98:e5:ee:23:e8:15:63:8e:ea:
ea:7d:a6:c3:5e:fd:f4:e7:61:43:fd:1d:bd:75:fe:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:28:3B:C1:DC:14:DD:99:FF:DF:7E:DE:2A:06:A8:F6:49:0F:DC
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:5d:ec:bf:e1:b3:4d:ac:dc:a4:bf:bc:60:ac:e5:e8:af:
3a:85:30:8a:0c:f8:42:86:2a:13:58:bc:93:40:10:ad:23:02:
9a:43:f6:b7:95:dd:26:2f:48:13:53:7c:91:b3:81:9b:c7:7e:
ac:41:c7:73:b7:1a:cf:43:1f:13:6b:5f:3f:f5:6d:7e:3a:3f:
79:48:77:fd:4f:06:0b:72:d6:d8:de:be:45:98:24:21:56:a2:
92:80:59:4c:c3:96:b0:3d:72:01:1d:3e:1b:91:c1:43:5e:1c:
0f:d9:88:1c:fa:fb:87:a3:bb:70:2a:73:19:7c:34:45:af:a4:
ad:8a:f8:c3:d0:ef:2b:db:a0:77:8e:11:8b:b4:37:c5:54:2b:
7a:42:bb:3c:ac:fd:b0:32:00:24:f4:70:03:dc:4a:2f:0c:1f:
20:b7:d8:76:3c:ce:ea:8a:14:ef:87:00:bf:7e:14:d9:d4:ad:
20:10:5e:2e:e0:40:7c:8b:4b:15:55:74:e3:cb:31:c3:2f:22:
1c:7a:3c:1d:35:db:f6:88:a8:50:ad:01:e4:d0:cf:4b:d2:63:
96:66:b3:b2:9e:69:32:8c:b2:96:6e:b7:f8:02:cc:5b:b4:d7:
37:86:55:73:ea:41:b5:15:8e:40:2e:d7:4c:1b:93:59:b6:74:
71:84:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:20 2025 by rpki-client