Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: kDySzC+4dr27U5HtmUY5X6pl+aYbm5QxFya/wQn6j+c=
Subject key identifier: A4:74:3E:7C:F9:0A:4C:25:A6:DD:95:37:32:0B:7D:70:74:5A:6E:3E
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 019A71EECD29893CC0D5F3EEC6E88B40EB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: HY9B2oaMk/kCjHFvbt0pfg/lDZyO/I2X2iMRC+uc73E=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cd:29:89:3c:c0:d5:f3:ee:c6:e8:8b:40:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=a4743e7cf90a4c25a6dd9537320b7d70745a6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:01:b0:66:17:9e:a9:da:3b:e2:e1:de:c5:
c4:77:ac:0d:55:cc:77:d7:e7:6d:b2:b1:f8:62:a5:
a2:c0:1e:b8:b2:0d:f2:c3:6f:b3:b3:eb:1d:f0:a6:
a7:b9:f4:5a:64:31:15:f3:bb:52:e4:07:33:59:a3:
cd:81:af:92:a3:0f:96:a4:56:04:2f:c5:ed:f6:bb:
25:f8:da:ce:5c:1e:1a:45:31:3f:75:e9:e7:e5:ae:
bc:c6:a9:86:7e:ff:f5:cb:10:80:1f:0a:88:e7:a1:
27:ca:96:1b:fa:97:a6:20:53:48:98:36:c6:84:0c:
f8:48:3d:31:aa:93:a1:ba:eb:e8:00:76:40:88:b4:
d3:1e:09:64:1c:32:fa:83:6e:60:b5:42:2a:bc:26:
4e:56:0d:89:9f:9e:53:3c:15:09:90:18:6f:0b:38:
32:a9:e7:61:5e:76:73:83:d4:c7:89:58:bf:55:c8:
11:12:65:7f:e2:e8:7b:26:45:9f:22:12:05:34:19:
d7:a5:5b:1a:89:bd:ea:f9:38:62:ec:2b:b3:25:0d:
5a:09:cc:7f:4f:91:bd:61:8e:9f:33:93:92:42:ce:
e7:52:c8:97:5d:ff:e3:59:5a:1f:25:a1:b7:59:c7:
33:2c:ea:db:ab:6f:d6:ad:bc:95:c7:c2:d7:f8:17:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:3E:7C:F9:0A:4C:25:A6:DD:95:37:32:0B:7D:70:74:5A:6E:3E
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4e:f6:2b:22:db:cc:2e:5b:61:ba:ac:4b:e6:f1:a1:40:65:
e2:fe:af:6e:18:99:c3:c1:69:5f:7d:40:64:97:d8:d6:db:41:
d9:75:f7:53:e4:94:37:d3:9a:c8:47:48:9d:dd:9e:67:ac:c6:
58:b7:d5:f5:f0:67:f6:5d:5c:9e:59:6e:5e:dd:da:0e:75:be:
a4:79:38:ce:f5:8a:e5:87:83:60:32:06:31:94:8f:39:a6:44:
59:b4:6d:ee:22:a5:91:df:f2:f9:d6:6c:28:22:bc:14:35:5a:
89:8f:93:96:4b:eb:ab:ca:c6:23:8d:62:cf:dc:b8:c6:ac:f3:
cc:fe:1c:3f:c1:25:e5:c0:fa:67:5a:37:a4:97:42:36:72:01:
8f:05:6c:30:03:13:1d:00:5d:2d:27:5a:e8:df:e2:cb:96:e6:
ed:ff:60:5b:ee:fd:8b:2f:50:48:89:55:7f:ac:e9:a1:b0:a6:
86:13:66:d4:c5:22:a1:64:72:d2:00:90:4a:a5:6a:91:b2:4a:
28:32:62:39:c7:fe:75:0e:e8:38:6b:47:e2:b6:b0:1b:9e:50:
e1:2a:15:68:75:bf:29:ec:22:b2:2b:03:d1:30:5a:2f:81:33:
91:3a:36:81:44:c5:37:d2:af:79:d7:eb:8b:ec:4f:43:21:a3:
71:62:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:37 2025 by rpki-client