Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: XFbVQqO/7kE0BByazgS7kqCVnE4qTI5FPWqMsiQAMIY=
Subject key identifier: 3A:75:F6:A3:DC:BD:16:F3:C2:A6:A5:89:ED:82:44:7C:45:F0:7E:FA
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 019A71EED57EE327CF7452358956A019F1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 09F6
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: OVza5kWVCZqp5GREKpxrcnJrVEfkJFyi3J4nMV2iR+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d5:7e:e3:27:cf:74:52:35:89:56:a0:19:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=3a75f6a3dcbd16f3c2a6a589ed82447c45f07efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:82:8b:c9:a0:2c:42:d3:8d:5b:71:6d:7a:
12:19:48:c8:28:72:c8:79:f0:87:64:13:b0:e7:72:
50:20:f1:73:69:56:af:d9:70:3b:15:9a:d2:49:34:
19:ba:46:10:d0:32:97:7f:79:ca:a2:35:f5:c7:9b:
fb:f0:47:84:b7:f3:8d:f3:95:da:eb:28:33:00:1e:
d6:a3:10:7d:ee:b1:af:84:1e:97:9d:1e:d5:10:4c:
aa:b6:c3:01:c1:40:81:8f:40:97:61:0e:63:37:87:
e6:2b:03:4d:be:1a:93:ea:dc:f3:89:27:f4:a1:d5:
0f:3d:50:9b:39:e7:8e:ac:66:1e:f0:16:ab:0c:99:
3f:fe:1d:1a:7c:93:a5:e6:84:38:27:57:7e:79:d1:
be:66:b6:e9:64:b9:93:13:ea:3d:e6:c3:ec:37:19:
8a:af:8f:3f:ab:6d:d2:06:94:7b:14:67:52:71:33:
15:cf:79:97:d3:f7:a7:85:e8:2c:51:35:7a:21:a8:
f3:79:04:85:d0:0c:4e:4e:ff:e9:5a:e5:7f:6d:3c:
7a:f4:c5:ce:1f:e2:5d:b7:9e:f5:74:fa:4a:1b:28:
df:0e:90:d1:f0:d4:02:06:d0:92:61:56:97:23:e0:
f1:0d:f7:63:06:1a:51:82:16:d2:f6:48:b2:0b:ea:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:F6:A3:DC:BD:16:F3:C2:A6:A5:89:ED:82:44:7C:45:F0:7E:FA
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cd:e4:11:b2:fb:36:22:9c:c4:a3:d6:19:0a:31:ce:3f:75:
5b:9a:07:13:13:0c:b8:38:63:cd:5d:ac:c9:81:f2:e1:86:f9:
e6:59:8a:c0:e7:86:92:35:1c:77:f1:54:d2:5c:a6:f0:c7:e2:
36:7e:56:5e:2e:08:89:4f:42:ef:af:92:53:d5:c2:19:7e:56:
74:82:85:ff:46:37:4a:f4:dc:c5:57:e2:43:0b:7f:ba:64:82:
b8:ef:68:b9:9f:fc:0c:a3:21:48:4f:f4:25:2a:c9:2c:0f:ca:
be:2c:df:31:ee:0d:5a:6f:3d:40:31:3d:45:8c:51:f8:b7:b3:
cb:ec:fb:a8:fc:b7:79:e5:0a:b0:b7:a7:ec:43:ed:4d:13:10:
2a:b5:aa:11:4d:d1:eb:e3:95:e9:72:8d:4c:2e:91:94:d4:62:
0f:71:7b:d1:1b:2f:da:3f:94:6e:ac:81:82:22:18:8e:b4:4c:
67:9a:24:01:8f:94:40:d9:1f:9b:bd:86:2a:9c:0e:13:f3:bf:
8d:f7:13:f0:a8:e3:68:b5:72:50:97:77:04:3d:b4:6a:06:78:
82:27:fe:38:1a:18:d8:06:48:42:4d:c5:0b:e1:f7:1d:45:77:
65:57:d0:1f:27:d9:33:83:9c:39:24:ce:3e:91:b4:66:97:91:
17:9e:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client