Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: wW8oz9bZKDUlcAPOgFoLRcly4GvE7ZqF5Y7zZHUjyvk=
Subject key identifier: 60:42:BA:AE:5E:76:49:11:32:66:47:5F:CE:6F:AF:84:CB:F7:E5:4F
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019A71B7DF346FF3A6BA47A4ED1B7D73678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0DB5
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: dpHn8QdSKfknXtlk/qt6gHj04JZqJWycElMcPUDSdPQ=)
2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:34:6f:f3:a6:ba:47:a4:ed:1b:7d:73:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=6042baae5e7649113266475fce6faf84cbf7e54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:c6:f2:68:60:ed:89:be:4e:54:00:36:58:
b7:03:ee:fb:17:23:57:40:b6:8d:6e:42:7d:ec:3e:
07:94:4c:44:05:49:b2:f4:76:56:79:22:99:db:28:
47:e3:22:ac:d2:2b:ec:71:81:05:d6:7a:4b:37:bb:
e4:82:89:4f:3d:26:62:40:2c:96:dd:4b:58:aa:27:
71:57:8a:6f:ea:06:69:99:6c:00:ec:84:da:8c:38:
48:7e:87:8f:c7:f8:0a:f1:69:ee:d6:97:05:a7:3c:
2f:3d:8a:c0:0a:c2:d2:19:dc:22:2d:98:a8:4b:58:
d4:39:08:ce:12:80:18:c4:be:2a:f3:00:94:8c:89:
fb:4d:83:16:fd:37:e4:9f:58:14:f6:63:84:b3:b7:
4d:e1:23:9f:c8:ec:a5:bb:2a:47:32:6d:15:7f:42:
4e:d4:18:3b:1f:83:24:9b:aa:f3:0a:66:0c:8e:cb:
e0:03:f4:f2:ab:12:f3:b8:f4:b1:c8:44:8a:04:df:
9f:b3:38:93:fb:fb:6e:83:c2:d2:87:51:c1:e2:0f:
e5:35:d4:26:51:8e:9d:ae:03:e6:05:d8:22:11:4b:
35:d0:df:73:ac:8b:f9:83:44:0f:22:b0:57:64:08:
d8:83:86:2a:f4:6d:19:0f:38:ba:f4:7f:f4:83:d9:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:BA:AE:5E:76:49:11:32:66:47:5F:CE:6F:AF:84:CB:F7:E5:4F
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1a:df:2f:a7:6d:aa:32:bf:b9:28:bb:82:39:4c:ba:eb:79:
0d:12:20:87:15:75:76:28:12:cb:12:e0:37:68:12:60:f7:9f:
3c:7e:7f:a7:ec:40:72:1f:16:1e:a9:a3:88:6d:22:d4:80:12:
47:4c:a6:fb:f8:ff:89:49:7a:72:6c:24:aa:74:70:d3:19:ad:
a4:d2:49:a0:b2:f9:02:ee:5d:4a:21:bc:7a:b9:c4:e2:20:41:
43:80:55:08:81:41:64:80:0f:b2:78:f8:9e:c7:90:e3:cf:7f:
40:79:54:f1:83:a4:48:a4:b0:11:55:2d:25:10:80:6b:c4:34:
31:c6:d9:8b:84:41:74:09:59:a2:a8:04:b6:01:86:73:79:d5:
3e:ac:1b:02:0c:ce:1d:2e:02:a8:77:83:bf:47:43:1d:aa:37:
fb:b8:28:36:8e:8e:c7:4b:11:94:3f:c8:c6:e6:7c:54:29:e9:
1b:7f:72:b7:3b:1a:cb:99:9a:6e:3a:fa:61:cc:11:75:d1:4d:
b8:5f:ba:09:c4:ce:ed:1f:10:79:75:b2:aa:58:2b:ab:f6:37:
f3:62:38:de:23:65:a2:8e:76:83:13:9e:f5:ca:0a:e4:20:c7:
6b:b4:25:e9:db:a9:2b:a6:de:7f:6b:d0:20:3e:ad:07:ea:5e:
04:2b:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:01 2025 by rpki-client