Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: IN0GxzRXHCnL8vd+PXHrDDb0b48XZmWwsbWNrrnW8vI=
Subject key identifier: B6:DA:8A:42:60:42:46:F5:86:A0:64:F7:6E:A9:D5:02:25:63:14:49
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 019A725C5C8FBAF46AFA07A159BED528196C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 105E
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: ATSb2iS4iTJGtf6S/Jwrhu7TZCYptnyDCBvojD8vsfg=)
2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5c:8f:ba:f4:6a:fa:07:a1:59:be:d5:28:19:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=b6da8a42604246f586a064f76ea9d50225631449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:80:1b:1d:0f:37:4c:d9:a2:4c:28:36:65:
ae:50:fa:ef:6d:3e:11:d7:54:0d:aa:8e:1f:ec:5b:
56:fd:e3:eb:a0:16:85:c2:c1:a4:a7:80:0d:0c:b4:
ba:bd:88:d5:96:bc:17:ef:59:eb:d3:2a:62:70:3d:
8f:17:4e:26:56:a7:48:9d:02:31:ce:af:8e:5f:1d:
0e:40:78:a0:d6:6a:a1:f6:ff:31:f0:e7:39:69:e7:
e0:62:68:ab:4b:f9:58:bf:1d:9e:6f:61:89:6a:c0:
97:3c:39:c4:c0:b5:45:5d:36:56:3a:8c:36:54:2f:
c1:14:ab:f1:d3:53:ce:35:b4:55:0d:f8:6f:43:59:
be:7f:d9:b8:64:f8:9f:65:4d:96:99:68:5a:4e:c8:
55:32:93:aa:2c:c5:d3:4d:1d:3a:fd:2d:43:c2:7e:
00:60:67:a8:91:66:a7:66:ef:66:5c:db:5f:75:6d:
1c:13:2e:37:f5:46:c0:0a:97:fb:55:8a:58:32:99:
bf:70:98:8e:47:ee:5c:fa:a5:29:38:41:85:b9:bc:
c6:65:fd:a0:71:e8:41:e4:6f:7c:06:34:23:8a:dd:
f1:2e:11:2b:04:64:e2:35:51:7b:1b:6a:20:e0:c0:
39:f3:47:99:1c:58:94:41:66:5e:05:44:cb:eb:74:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:8A:42:60:42:46:F5:86:A0:64:F7:6E:A9:D5:02:25:63:14:49
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fb:91:d8:6c:65:a4:77:35:72:25:79:39:26:6d:c4:93:36:
3f:09:a9:d0:62:a9:af:81:60:72:da:f1:23:b8:db:b0:84:a9:
f8:3e:87:2f:81:ce:1b:30:73:0e:da:d4:1e:f9:86:ca:43:c5:
27:41:3d:6d:98:b0:cb:2c:f3:4b:4b:74:88:22:f6:b1:ee:78:
19:78:c0:cf:98:82:c8:73:62:7f:b0:aa:39:6f:14:38:5c:37:
28:0d:16:25:e2:cb:86:10:08:12:bb:d9:3d:86:b4:2f:ca:f0:
22:f6:5d:c3:49:43:96:94:cd:d3:1f:00:03:f1:8b:5f:44:6b:
90:7f:92:bb:9d:fc:7a:4f:86:bb:7a:d3:fc:86:bf:77:dc:82:
ba:90:37:17:fc:00:e9:99:34:28:84:a2:d3:93:0b:9f:08:b2:
6f:58:8e:92:28:3a:d6:93:e2:ea:a8:da:aa:bb:ca:aa:8b:42:
63:62:ec:87:7a:fd:7c:4d:67:dc:4c:93:ca:2d:b4:35:51:fa:
85:57:f8:c1:53:b7:e7:ea:fc:19:04:81:71:d8:6b:ae:0d:b6:
de:21:87:3d:5c:30:12:3e:9c:50:70:80:cf:78:39:70:a4:f2:
a6:fa:0f:18:47:40:f8:a1:f1:47:d4:fb:f2:b2:60:97:ea:fc:
e8:63:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:30 2025 by rpki-client