Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: 6ytNtmlFMY8cNjiutFq8chn2tAPYJWf87bBr+SNhwsg=
Subject key identifier: D4:B1:DF:D1:97:29:54:01:53:83:B3:89:02:0E:30:5D:81:2A:3B:E6
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 019A4FCFF97CDFAA40575A64A6469499668A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0E94
Signing time: Tue 04 Nov 2025 17:00:21 +0000
Manifest this update: Tue 04 Nov 2025 17:00:21 +0000
Manifest next update: Wed 05 Nov 2025 17:00:21 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: G9W3uSCqzJgzGq+TETfxSQDXz1sJCSsGA7mgxAIohwo=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f9:7c:df:aa:40:57:5a:64:a6:46:94:99:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Nov 4 17:00:21 2025 GMT
Not After : Nov 5 17:00:21 2025 GMT
Subject: CN=d4b1dfd1972954015383b389020e305d812a3be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:74:df:e2:cc:e6:5a:0d:9e:c1:b2:59:ed:
7c:02:58:d1:8e:4f:67:ff:8b:be:72:66:41:55:bb:
38:ee:1a:91:44:05:83:7a:0a:17:74:dd:5d:44:9d:
d5:45:ab:20:0d:9b:0f:60:45:dc:38:3c:d3:ec:93:
64:78:ed:3f:a8:53:cb:93:bc:01:32:bf:c4:f7:a9:
83:54:0d:2b:2b:2b:a7:d9:d4:11:6f:6f:d8:97:90:
4e:e7:df:7a:27:3d:29:28:86:73:cf:97:62:7a:ae:
6d:01:0e:27:14:e2:8c:51:32:c5:e8:97:63:39:4b:
a4:f7:64:c9:cf:60:5b:56:65:1a:fc:b3:0a:e9:40:
2f:7e:71:c8:be:c4:8b:ae:b0:e8:d4:37:48:4b:8f:
21:fa:8e:f6:7f:9c:bc:9a:5d:e7:33:cb:ff:3b:33:
a1:60:82:15:7d:a3:5b:98:1e:f4:fa:96:e3:f0:1b:
2b:2b:1c:78:9c:4b:dc:9f:f0:c1:56:b3:93:5e:67:
4f:f8:68:39:18:0d:b5:ff:46:12:d0:b1:0e:8c:1f:
b4:fc:af:51:c0:d7:86:b0:03:00:5d:c7:8a:7f:7c:
0d:dd:f0:cd:a7:e4:1b:2e:b4:19:23:c8:04:30:05:
9d:a6:be:de:b6:e1:8f:27:7b:e6:da:38:11:7e:eb:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:DF:D1:97:29:54:01:53:83:B3:89:02:0E:30:5D:81:2A:3B:E6
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:60:d0:13:0a:89:52:28:5a:92:da:94:90:ef:5a:23:05:
99:3a:7f:c6:07:36:11:bc:59:cc:15:ed:7e:70:21:6c:b7:72:
19:96:22:86:85:20:bc:0a:53:c4:a5:fa:14:c6:85:0a:09:9e:
0d:71:29:c9:35:e8:9b:d0:03:f9:3c:33:61:50:8d:7c:57:86:
bd:02:bb:20:21:10:69:62:fb:cc:f0:a9:92:6f:78:fa:70:85:
9e:c5:d1:f9:ee:53:5a:53:9a:0a:8d:49:d4:92:7f:49:82:1f:
f7:f0:a0:51:5d:f5:f6:55:af:b9:bb:a7:f9:6c:22:6f:7a:44:
d1:88:1b:18:43:b2:cf:7f:5a:51:99:ae:29:37:2f:89:95:f3:
7f:50:06:6b:57:d4:ea:0b:55:0d:a7:7b:d9:57:0f:ad:50:16:
6d:bb:82:84:01:24:08:42:2a:3f:ab:d5:22:19:62:c3:09:04:
58:a4:56:bf:9d:b3:ca:92:0b:60:43:d0:89:4e:eb:00:e6:6a:
89:d7:de:d1:c7:33:b9:7a:6c:b1:62:7d:91:4e:68:3d:74:27:
1f:e5:be:c5:c2:07:4a:92:90:27:45:2c:34:0f:ef:f1:78:25:
97:c5:f1:b6:79:4d:65:75:54:33:b2:8a:44:91:7f:99:7f:5a:
92:5f:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:14:33 2025 by rpki-client