Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: hw2OPrDnHpHLVMLKQWbq+Gw6mo5qTNrqutbBuDlpqb8=
Subject key identifier: 2B:87:E3:07:29:DC:94:65:2A:A6:BA:00:90:65:C4:80:2E:93:63:A4
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019A24E60EE007EAEBDEACC9A256FB9524A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1709
Signing time: Mon 27 Oct 2025 09:00:48 +0000
Manifest this update: Mon 27 Oct 2025 09:00:48 +0000
Manifest next update: Tue 28 Oct 2025 09:00:48 +0000
Files and hashes: 1: 1-iJXKulxk75axQt0SWXxhU53Dr8.roa (hash: AOdRR2tLhzCT6KWQkYdadkTVDMEnSkAvEIbZwbvnOv4=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: iWIExK4rmjAQAr4Hw1WrElvavWAmpJ2xW24owmq51kA=)
3: QSdwbn6ALsEGe_yU6cXgEdE9fZw.roa (hash: CSscM3Lnl50LpuVA3uePIZe0PqLRyMqB/N7RLZ/QCf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:0e:e0:07:ea:eb:de:ac:c9:a2:56:fb:95:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Oct 27 09:00:48 2025 GMT
Not After : Oct 28 09:00:48 2025 GMT
Subject: CN=2b87e30729dc94652aa6ba009065c4802e9363a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:18:4a:f7:79:7c:85:73:71:e8:0d:a0:27:
8c:c2:1d:1d:f5:5f:0b:bf:77:eb:db:80:15:3b:50:
3d:1d:23:fa:7e:08:2c:bb:8d:6f:d9:0f:cf:4d:e9:
f7:52:52:32:aa:96:76:36:65:94:f4:1d:f1:3b:a1:
3b:97:29:16:1e:66:4f:35:9f:b3:fd:64:de:77:d7:
67:d2:c4:b7:31:20:d1:61:e0:24:23:11:2e:dc:6d:
24:44:96:46:48:e7:e5:fd:23:5e:f6:b0:51:7a:1e:
e7:1e:79:e4:58:4e:17:14:5f:ae:56:4f:aa:c1:48:
98:c3:bc:b1:97:25:40:b3:4c:7a:7f:42:68:86:c0:
84:9d:dd:80:ff:89:e8:34:08:0a:98:86:e5:81:01:
c2:33:76:44:c8:81:61:71:0e:50:fe:19:7b:82:a2:
21:99:df:cb:e2:87:2c:a0:a4:34:87:bb:dc:93:3e:
a0:5e:8c:1c:62:eb:b5:9b:63:35:2f:ee:6a:1a:54:
de:d3:b8:b6:c5:f3:80:31:29:07:a9:94:90:29:fe:
4a:b6:59:ef:11:21:db:df:d9:0b:13:11:a8:a0:01:
36:c1:07:3f:dc:08:79:56:24:fc:6a:e4:9e:fb:b7:
12:e1:48:85:ee:77:2a:46:12:6e:e0:aa:57:7c:62:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:E3:07:29:DC:94:65:2A:A6:BA:00:90:65:C4:80:2E:93:63:A4
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:66:72:0d:8d:5c:f1:47:de:7a:36:8b:46:00:7b:a6:37:
01:75:a2:4e:7b:0a:d3:4c:2d:18:10:69:d8:01:e6:28:9c:9f:
cb:24:c8:09:66:30:61:0d:68:6d:1c:09:e8:73:69:f6:dd:2d:
71:e4:c8:c9:de:ca:33:e9:35:1a:8a:20:39:dc:10:5c:8a:47:
70:64:c9:a6:8c:38:68:0b:eb:e8:dc:99:3f:2f:b9:c2:fe:29:
1b:07:4e:ec:bc:4c:ec:40:b4:ba:c9:c1:c0:8b:e8:4d:94:5f:
35:b5:dd:70:71:34:93:b2:c4:21:d6:a1:ba:03:fd:41:2e:57:
e3:b3:0d:a3:fa:ed:e6:6b:af:08:0f:fd:fc:51:c0:22:e2:5b:
cb:bb:2a:86:92:d7:38:b8:7a:aa:d9:06:32:eb:37:19:71:70:
1b:06:5a:14:85:ac:19:cd:d6:fa:51:cc:55:75:e3:85:1e:bf:
3a:1d:9c:00:6e:35:e2:68:b2:f6:1c:d6:e6:9c:15:7e:d8:ca:
c0:cc:3f:cf:08:eb:67:f9:03:c2:b4:e0:ec:a9:43:45:54:eb:
8e:dd:10:81:17:bb:8c:b4:2f:b8:92:bc:f8:27:9f:7b:a3:06:
78:f4:78:b2:9d:c8:28:9c:62:9c:3e:3c:03:8e:25:03:36:42:
f8:8b:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:01:06 2025 by rpki-client